General

  • Target

    86e7855112a61ab6bb85cc16e5c4c580N

  • Size

    35KB

  • MD5

    86e7855112a61ab6bb85cc16e5c4c580

  • SHA1

    49e629f076739bd0bdc4277ac12c196323e5f443

  • SHA256

    dbef7ec0d6c0bf4d17746dbaaae568d44243c354a1e1981d14e0d5c521f01ba2

  • SHA512

    343abec4256236109ef5b14837a9a3af41218cb70436ff3f8e99cb57f20f1e4a61391cfc83db8d57cf1ffdc962c31f3718a49478b7202b3da94ef3a22db7983e

  • SSDEEP

    768:V6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:Y8Z0kA7FHlO2OwOTUtKjpB

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 86e7855112a61ab6bb85cc16e5c4c580N
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections