General

  • Target

    4f5009255f9d7bd18755b825538beb70N.exe

  • Size

    316KB

  • MD5

    4f5009255f9d7bd18755b825538beb70

  • SHA1

    30dbf8821b5008d082a4d9cc8f51b31e042860a3

  • SHA256

    2f964b5129b7cbaa045070b59a7ddc955f0cf09a95cc5cda88f7ff7e175ea62c

  • SHA512

    390d512013f697cc7ee6fba720c749be961899dfe320b77e538740861e307d3f2fdbf729528939688026ae2415a60667d23aed82fad20823f894a07f31d3a8c5

  • SSDEEP

    1536:44d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:4IdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4f5009255f9d7bd18755b825538beb70N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections