General

  • Target

    00dd4fe1460348e8e3d8eb7923e0ada0N

  • Size

    248KB

  • MD5

    00dd4fe1460348e8e3d8eb7923e0ada0

  • SHA1

    8428a96a4e28deaefd0c88467322315e34063a97

  • SHA256

    065636681b47bfbae8c346ccfd7b0a627b4a5510a598a505fc1ee3667cd637f1

  • SHA512

    23e8d6a429735cd278a83fd212edcb0e63178a0a526fa7cb49c4ed50e8c66d750d70271ef30e0dd65da1faf8b30178666c12285bef62e182c7b45c921b389b11

  • SSDEEP

    1536:H4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:HIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 00dd4fe1460348e8e3d8eb7923e0ada0N
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections