General

  • Target

    2cd3d0fb95924a18a18373d6345f20491796005895ac16fce70315e0278a58d6N

  • Size

    316KB

  • MD5

    b3e3e0668e156bb93e0c723e0e09eba0

  • SHA1

    9315f1c34f5eba8964a5687483ae726e0743f81a

  • SHA256

    2cd3d0fb95924a18a18373d6345f20491796005895ac16fce70315e0278a58d6

  • SHA512

    adb48719bbf4ecdcf3b5a73586266070e3cc257007233dc56e87e448a903d4cffbc2038eba00d9ebf30688b2387c33592048cf3abbf24c09d634e2a58e7efca9

  • SSDEEP

    1536:B4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:BIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2cd3d0fb95924a18a18373d6345f20491796005895ac16fce70315e0278a58d6N
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections