General

  • Target

    3bd37b841e9cc5425f2a9323493f7f72ea13f887c6a0cc3270d6183b74eff027

  • Size

    248KB

  • MD5

    0fdded70845b58f21d6cf78e9cf0d217

  • SHA1

    c647490ed1276d8e26621a7c167732841598a8aa

  • SHA256

    3bd37b841e9cc5425f2a9323493f7f72ea13f887c6a0cc3270d6183b74eff027

  • SHA512

    d84db90e35b96b39fe1521a0a2a38493dbb4966387b005e29ef0ed872da40e4828f2640f9c77ab64a3dd73fa07cd5bab06726f4ea1c57404234d593b19623998

  • SSDEEP

    1536:w4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:wIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3bd37b841e9cc5425f2a9323493f7f72ea13f887c6a0cc3270d6183b74eff027
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections