General

  • Target

    f7bcbc852d18ea8cfc15cee67c2fd9e0N

  • Size

    316KB

  • MD5

    f7bcbc852d18ea8cfc15cee67c2fd9e0

  • SHA1

    863a8282055a31da9aa1b31ff3a0a0d7666e9da9

  • SHA256

    eaf87032107c07d369a1f1ca96c5fb433d7eeaf08227a5cca365562fd8a4187f

  • SHA512

    3033843967a11821f49340d1647cd8d4249ecd11c3e9af86628cb63111cfead98ab54f9563ebf41bdc7df0813156c12a03659b8be3f11f2cec3f6a54622dbd72

  • SSDEEP

    1536:84d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:8IdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f7bcbc852d18ea8cfc15cee67c2fd9e0N
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections