General

  • Target

    903505ece06d86ac13c3933a5078f344f292d69a1b30193ce53db15369398721

  • Size

    316KB

  • MD5

    75f38db66a3440e4e55b488792cdbc17

  • SHA1

    b4049ff97dba16bf3c7f93478a57e7eb97c905c7

  • SHA256

    903505ece06d86ac13c3933a5078f344f292d69a1b30193ce53db15369398721

  • SHA512

    46917ebc442662ee1c559ef05e6e2f8d8384be6b21f0d033712f280f095bf28f75cdcbaeb65c3abfc6c3a894927bc5e265b11f8f6826ea161a0d40cfe59701b7

  • SSDEEP

    1536:S4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:SIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 903505ece06d86ac13c3933a5078f344f292d69a1b30193ce53db15369398721
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections