General

  • Target

    150417fecaca271d3e773120a71eeb40N

  • Size

    248KB

  • MD5

    150417fecaca271d3e773120a71eeb40

  • SHA1

    6356ed820ad3f6455c6160ccba04764cd0ead68c

  • SHA256

    a0f4049ea279c67b7ac307907e2e3cef83d40627de629887652e297f032b5957

  • SHA512

    ef47f3182de402b19b2ce4b7f814d46d34267f41c5a8edf765f80e9d455940a0829856953b9185e5843085a2872b9ee5daec9e409f5a3efd5d0792f38bc070f8

  • SSDEEP

    1536:a4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:aIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 150417fecaca271d3e773120a71eeb40N
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections