General

  • Target

    f51d1f301e06e00e936b9ab3bf2baf4e85d528c69107ffd7374ac3de15ea81aaN

  • Size

    248KB

  • MD5

    5fe3619e64f39a9018ac8812bcf63b90

  • SHA1

    ffd2b0924799338a7ed285bd045c63ec1944f4d2

  • SHA256

    f51d1f301e06e00e936b9ab3bf2baf4e85d528c69107ffd7374ac3de15ea81aa

  • SHA512

    61511dfc86f3ee618b60a90c9c901541e5ccdf8bee6d62f20732348ee25b20002009efb51a612a91178b4144045a59c75385eb3605bd01bf88d4ca6c0a5c27da

  • SSDEEP

    1536:H4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:HIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f51d1f301e06e00e936b9ab3bf2baf4e85d528c69107ffd7374ac3de15ea81aaN
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections