General

  • Target

    6f7c753296d62b6eec760dc1eafade6bd0b71d298572d1120eacde31d3d9e05dN.exe

  • Size

    248KB

  • MD5

    d1d3d4ccbd446102688fa1de75619750

  • SHA1

    b59d85126103ffb2aef1440998338be9607da97a

  • SHA256

    6f7c753296d62b6eec760dc1eafade6bd0b71d298572d1120eacde31d3d9e05d

  • SHA512

    7462ee3312a80aef9126efa6c00486e394c98c4c63a7e346cd5f9764d9d4485fda4bc4cc8b78afaabc9026b1f48b6bdb0ebff7c37394d60e5d7cdcfb181f58f2

  • SSDEEP

    1536:w4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:wIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6f7c753296d62b6eec760dc1eafade6bd0b71d298572d1120eacde31d3d9e05dN.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections