General

  • Target

    213c47721a2e8a833e4e0645ed88dd45510defd423ba0fe0666ba4dd88676527

  • Size

    248KB

  • MD5

    02ab8774455d82e2404d010262fbb66b

  • SHA1

    e61b4cfc478412f755cd558f8967b0551f7eec1b

  • SHA256

    213c47721a2e8a833e4e0645ed88dd45510defd423ba0fe0666ba4dd88676527

  • SHA512

    186ab4a424a7e7aa6acd7562f3ba0759b0a334b7f3fa30624479809fea622563763a5c03571b9ab9b0c72ba755792790901407c01815e6221828aa88737c732e

  • SSDEEP

    1536:H4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:HIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 213c47721a2e8a833e4e0645ed88dd45510defd423ba0fe0666ba4dd88676527
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections