General

  • Target

    cc63dc4f0df9ecd0ffef22fa15a19190N

  • Size

    51KB

  • MD5

    cc63dc4f0df9ecd0ffef22fa15a19190

  • SHA1

    abee6ec7e7806973fdb4d70fce7190e0c864b5e6

  • SHA256

    4d53e91f076c0211c2ae4b314fe47a2775a4063991e2ad995ae755432214c4dc

  • SHA512

    8590535dee6f8416d2713190da47fe3e1b85ba0a44cef6224aeb5a8640841200025b22a72f4e9c2a50bc6c7bd4def9c58d456812c7061fb8e9532f6aa9fd6f2c

  • SSDEEP

    768:eY6MYKJnGs3bcJPyO2dqhIPDiiJElp+jV9rmltavrb/yWIl9kH11:eYJ7Jx4f2AGWUj/rmltaTGPQ11

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cc63dc4f0df9ecd0ffef22fa15a19190N
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections