General

  • Target

    87b74d0e6542d1c9c29c4f17e2faf960N

  • Size

    316KB

  • MD5

    87b74d0e6542d1c9c29c4f17e2faf960

  • SHA1

    171df588b13b1a7dac2a630dd3ba705976f75c8f

  • SHA256

    cc04339c5b2fbb53d427309c875c15a87be9937c01130bf42a490f5d8b5a201a

  • SHA512

    07bd1f02f362c8c26d0c98bd08345e2d0275e8c7ea3bd5f4a10e41f355315eb58894819783c8eb49fd27c064a452b8065e4a1f957b4c15e6dd4216a42d3a89f1

  • SSDEEP

    1536:Q4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:QIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 87b74d0e6542d1c9c29c4f17e2faf960N
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections