General

  • Target

    c4c21bedf6af844486d4b41dc0141c998521033104703f5be649ecf5465a0bbbN

  • Size

    316KB

  • MD5

    eaeec8c174b507bda8b18effcea28310

  • SHA1

    aeadf463cae43d49ea6bb34552fb68a6807effc5

  • SHA256

    c4c21bedf6af844486d4b41dc0141c998521033104703f5be649ecf5465a0bbb

  • SHA512

    eb7eb72d2208c34ce5d948628ba313cb02a4f7162dacb17b010a3b1d71f29bae78acec2cdd6a1ba0453602ac94186479d9657b3bba9adfd1dbd82c82cd9b3822

  • SSDEEP

    1536:u4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:uIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c4c21bedf6af844486d4b41dc0141c998521033104703f5be649ecf5465a0bbbN
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections