General

  • Target

    c834b7e46c39646b6394af461cb630eb6fa857308d12c59fedc613d8711ac91aN

  • Size

    248KB

  • MD5

    9293784d2106c3c7779201068a6af970

  • SHA1

    c8d0b6b7b6015dfde50d9a522682213d70e2bef8

  • SHA256

    c834b7e46c39646b6394af461cb630eb6fa857308d12c59fedc613d8711ac91a

  • SHA512

    cda8fcc616d86b1396be260274fde2b8f615525c7b243e2106c8822b7a10711391db33ac05d5c8728dbed2b41f364b13e88ab28e6fe397acb17653b0fdff4b3d

  • SSDEEP

    1536:D4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:DIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c834b7e46c39646b6394af461cb630eb6fa857308d12c59fedc613d8711ac91aN
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections