General

  • Target

    a05580257974ad8de31268d8a2604e08fea7f59bd9f0e05e5e38a30e9fe58942N.exe

  • Size

    248KB

  • MD5

    586fc3a0e3bced0d9678236af191c580

  • SHA1

    1158033488586213eb9ee8ea01b04e66be38cb7c

  • SHA256

    a05580257974ad8de31268d8a2604e08fea7f59bd9f0e05e5e38a30e9fe58942

  • SHA512

    69cf7065eedba9fa9c4a9215e8a487c95b1372b33b4ee9e02a54845db41986c7fa4a8c0683dd1e670fab0747a02779e984caea7e719daff0f1a8eb5a05248281

  • SSDEEP

    1536:M4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:MIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a05580257974ad8de31268d8a2604e08fea7f59bd9f0e05e5e38a30e9fe58942N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections