General

  • Target

    a204f9dedf0dd81629ada4ff71a138c0N

  • Size

    61KB

  • MD5

    a204f9dedf0dd81629ada4ff71a138c0

  • SHA1

    5967412ecf216707518350a9fa8432f53f3d0b66

  • SHA256

    b3019d1fa0edf00d681239298dacd606d007d03f47eb7941d7c8b10caa1706c1

  • SHA512

    060d2367f7fab9e6176c41a874c8cf6dba8706312b7a588e944c9938c7934135513274a186dc36e738d797ed50b14bda28e6f0600e43f896e539290c8841c343

  • SSDEEP

    768:JMEIvFGvZEr8LFK0ic46N47eSdYAHwmZ7Bp6JXXlaa5uA:JbIvYvZEyFKF6N4yS+AQmZIl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a204f9dedf0dd81629ada4ff71a138c0N
    .exe windows:4 windows x86 arch:x86

    08b67a9663d3a8c9505f3b2561bbdd1c


    Headers

    Imports

    Sections