General

  • Target

    4fe4d59d6b2d1b05da8a8223f44794b3c08f07436632675b15836b288277d5e7N

  • Size

    248KB

  • MD5

    35a6fecf89acf2a58da10c62b71c5b50

  • SHA1

    a74d10c5986378caf16f5fcef59b92c9e997eed4

  • SHA256

    4fe4d59d6b2d1b05da8a8223f44794b3c08f07436632675b15836b288277d5e7

  • SHA512

    b0491545dcfb9d02af887514135fdf1d388b9186bf8ca0f1b8b2563121ffd449d45b9fd989b8c007f8fe0456d5f56d21b0f71adeb22e6c311145905ab8fa11fe

  • SSDEEP

    1536:s4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:sIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4fe4d59d6b2d1b05da8a8223f44794b3c08f07436632675b15836b288277d5e7N
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections