General

  • Target

    c5bcc24ce84c675b951ab55029156537c866699ab79e28df9a527a4df0c1fad7N

  • Size

    248KB

  • MD5

    419bbac23ff9f945896c8d20ef2ea700

  • SHA1

    19c87c96396a9a2548040a22be34a9fe04ec21d7

  • SHA256

    c5bcc24ce84c675b951ab55029156537c866699ab79e28df9a527a4df0c1fad7

  • SHA512

    40d9b4e2d6ce75243ae58f0ce3de6ee991fcdbe43fb6d9219b4fd236a619afd610f9557c6665abf7fab7f05debe714f2a57d1d18764f864a08ec3016bdb31e5c

  • SSDEEP

    1536:H4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:HIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c5bcc24ce84c675b951ab55029156537c866699ab79e28df9a527a4df0c1fad7N
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections