General

  • Target

    b60eed81eeed429469628754681ae3685a2d7a4a6decb0f3affa181fb9b027c6N

  • Size

    248KB

  • MD5

    9260520e2e0849fed466bcd8dac5db40

  • SHA1

    2f3a77b53740d2a1d98dbfa918b6228891e79a8d

  • SHA256

    b60eed81eeed429469628754681ae3685a2d7a4a6decb0f3affa181fb9b027c6

  • SHA512

    2cfced455120e853f51bbcfefbaf7c1b2b10c909a17421b32a0488108776f86ad08642f4a4cc3c68f1c6bb015f704e94dbe5f9f7ac8e52846dec4a8733ba211f

  • SSDEEP

    1536:P4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:PIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b60eed81eeed429469628754681ae3685a2d7a4a6decb0f3affa181fb9b027c6N
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections