General

  • Target

    2c00a68f019175dd2aee4d8102ba425d23163a39557320451fefe10631f2aa50N

  • Size

    316KB

  • MD5

    b3363d3469b2abf3fa07636d59daf7e0

  • SHA1

    7646d02dbcb697af14bdbd43c1d8feb4c69f50e2

  • SHA256

    2c00a68f019175dd2aee4d8102ba425d23163a39557320451fefe10631f2aa50

  • SHA512

    e3ab228dd100db8ecd53acc76edb2e8c3d4667c8158b8a8256710f1e0ab443d0e34ac2e75359b5f94d5b0c6303aa5e80969340b9ced357d23fa2908e523127c6

  • SSDEEP

    1536:Z4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:ZIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2c00a68f019175dd2aee4d8102ba425d23163a39557320451fefe10631f2aa50N
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections