General

  • Target

    9c7edff2ba87bc185d8586c678c3df3064eb5f58284aac247bace6cac204f730N

  • Size

    248KB

  • MD5

    f1ccce6d520cfb9970acc527ef98af70

  • SHA1

    ecb2baf03c34e6fd5e25d0680b9755535cc58412

  • SHA256

    9c7edff2ba87bc185d8586c678c3df3064eb5f58284aac247bace6cac204f730

  • SHA512

    69a455e93e41a18acef523dfdc3989e3b865f20cca3ca8e16c394372907e01d78ffee7a5e8ed5baa63f49561238b2d3fb0d8798fc976bc5629de06e6f95081ab

  • SSDEEP

    1536:n4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:nIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9c7edff2ba87bc185d8586c678c3df3064eb5f58284aac247bace6cac204f730N
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections