General

  • Target

    2d1ee056bc421c99f3949bcad6ba35a0N

  • Size

    248KB

  • MD5

    2d1ee056bc421c99f3949bcad6ba35a0

  • SHA1

    6f1ad41865d327dbc744664b20c3ba3126ac4ac7

  • SHA256

    084eb88cb2666d2f30d40450896f1090f2dad1bbaafa4f5b136e9dcc29e655b3

  • SHA512

    3b77249c7044500d6bdba6d2f275f88981605818fb67db843acf0fd778111b5abcdecb26717c91b0336eea23611b5200062d2d9e73e20272f3a34e8d3841779e

  • SSDEEP

    1536:c4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:cIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2d1ee056bc421c99f3949bcad6ba35a0N
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections