General

  • Target

    580f7488247893f5652785d9b8eae150N.exe

  • Size

    248KB

  • MD5

    580f7488247893f5652785d9b8eae150

  • SHA1

    53e5c3414e0d82a650a78902fe41d69101fee938

  • SHA256

    0b251846766e7bf448e6a7424cdda75e0dfb6b217cb261298475c60ed6083b90

  • SHA512

    30b8728c71b81bdc1acda3534d7d59398f401846b518a0dc252c5f1de109c51b5ab4e66e903238f068b4ac9380bc03135554272067932a16feb530fb2eb1f420

  • SSDEEP

    1536:c4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:cIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 580f7488247893f5652785d9b8eae150N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections