General

  • Target

    53f5b80ba5f48a308185d1d6e22059e32afe6db61ce607e02905283cf41070e5N

  • Size

    248KB

  • MD5

    a79961571c1f27b9108590a91f519e60

  • SHA1

    f5a78f55130079458877dd9a2ee97dc956f1ed2a

  • SHA256

    53f5b80ba5f48a308185d1d6e22059e32afe6db61ce607e02905283cf41070e5

  • SHA512

    96ad0354791bd22f575fbcc47b7b2def93ce9e9e584369bd4c06a1ff9f523803bbba6572abde74eabfc0c1279665e4ee6d540ba3e5758620e6e574b4e17ebf2d

  • SSDEEP

    1536:r4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:rIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 53f5b80ba5f48a308185d1d6e22059e32afe6db61ce607e02905283cf41070e5N
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections