General

  • Target

    29bc6d7f9110ce2be4f21cb126d80a69d0c41ad31719ee3ee9803c1bcd4ae412N

  • Size

    316KB

  • MD5

    1979a7a3b8ac4f57140132ab7f5b96d0

  • SHA1

    81bf4bc628de789df9d0a534ec0faf22e38de5da

  • SHA256

    29bc6d7f9110ce2be4f21cb126d80a69d0c41ad31719ee3ee9803c1bcd4ae412

  • SHA512

    8a7319c3fd1b8a328dcb941ed7b4aca683a4e98d8da61074e942e516c8d573999751f42fc902f6ac7489e4fbf4b99424b60435541a82defb3aa89a0fcc178e6f

  • SSDEEP

    1536:S4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:SIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 29bc6d7f9110ce2be4f21cb126d80a69d0c41ad31719ee3ee9803c1bcd4ae412N
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections