General

  • Target

    cc2bfb887d09c61291c7d558cea36b5a365d8903b49d6cd4a76b2c945eba31b7N

  • Size

    316KB

  • MD5

    39354faca37c371716498ba6842fed90

  • SHA1

    9f9f5be8422b02ec697c6d13120ee84372fa878a

  • SHA256

    cc2bfb887d09c61291c7d558cea36b5a365d8903b49d6cd4a76b2c945eba31b7

  • SHA512

    899c1e626d20e5eeab251c47c15b6afe11d2ac3554b937ce14c95a1c8781eea4fed74c25ffecdba9dca8fe05ad34792b237e34219e3f3b3488bf98f897536a7b

  • SSDEEP

    1536:K4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:KIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cc2bfb887d09c61291c7d558cea36b5a365d8903b49d6cd4a76b2c945eba31b7N
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections