General

  • Target

    89c35cda21171c96fe82795c5d277090N.exe

  • Size

    248KB

  • MD5

    89c35cda21171c96fe82795c5d277090

  • SHA1

    fba86adca9307fb88f408f55b8014ccc3942d0af

  • SHA256

    5beecf5007c541956ff2f1c3b86d817a10cd5f2e3bab06d0c6366f0bd86c9fe1

  • SHA512

    6a461a7e712433b18dfd148af04dc12f764274645be370467c01d95a471d2bbec536780318a5ba7d324b471ff02f2821b0a3d177d52b7f29036d6d0d9bcc8fb9

  • SSDEEP

    1536:Y4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:YIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 89c35cda21171c96fe82795c5d277090N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections