General

  • Target

    4d7655c1df351e424a46bc5afe4d19a0N

  • Size

    248KB

  • MD5

    4d7655c1df351e424a46bc5afe4d19a0

  • SHA1

    6b37f405318a44434fbf3bd41297e6ec10fde452

  • SHA256

    4c03f2461697025d5d36f1c5b258756cccc8627747a8a309c151d4ba0cd481e3

  • SHA512

    164c892475751d5df32c9f8f4e6445c1dfc4ac892292fb5297afc6bb782bb49bec63c34e5c0b97e2828ffeb9f8100240097bc7b85d72efd0e88c7dd82029de87

  • SSDEEP

    1536:k4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:kIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4d7655c1df351e424a46bc5afe4d19a0N
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections