General

  • Target

    8ee17edb147ec0b3215c52bc1800b4d0N.exe

  • Size

    248KB

  • MD5

    8ee17edb147ec0b3215c52bc1800b4d0

  • SHA1

    3bbec7e82499876855f20cd9c3e63c7a66a14406

  • SHA256

    1f68f245da52356f10bccb35c915a2d87c99d40eca710001e48e4a8265938483

  • SHA512

    fdb741acbc9e88a395fb2d4bb1ace8acfe5fc0ed021725e158587f1a43128d8b827489a6a53a3d2fc65f2205ac4acbee9913ff24890d935167a243fcda65e637

  • SSDEEP

    1536:44d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:4IdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8ee17edb147ec0b3215c52bc1800b4d0N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections