General

  • Target

    23b8d8f2b44a1a1bf3e0629123e79810N.exe

  • Size

    316KB

  • MD5

    23b8d8f2b44a1a1bf3e0629123e79810

  • SHA1

    d2a424d94c6bd5ef5d6e40ae99dd72767260ec59

  • SHA256

    14ca7fb1fbaa6d7a5633a33aa5f9f31e5916ed47e916ffb346ca89b02feae5c6

  • SHA512

    5afc4da8ee61fdcf7174c5437f734c2426c003a33bcf37e01df9b7583fafc5a3cef1ac4e58136a7b1c44f57053f8e20de80d4a3f62d97252c37054921e11ad27

  • SSDEEP

    1536:i4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:iIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 23b8d8f2b44a1a1bf3e0629123e79810N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections