General

  • Target

    34d641fcd4d1f704ec3dbc5f68941f591c21dd59d4e3d51008d03f83cda0240cN

  • Size

    316KB

  • MD5

    a8052d9f32fd413e284a3e15aab1a070

  • SHA1

    4c1e34e21421a9ab2b97799b687c48b0a52ce0dc

  • SHA256

    34d641fcd4d1f704ec3dbc5f68941f591c21dd59d4e3d51008d03f83cda0240c

  • SHA512

    3590505d5aebbf151763900d05a3fde15e84b2f11295566d465c3a4807b36ba4b618cb189ed0559ea3c1cec226eaf91932e0a450e7fa44c683d1f3301ce2c814

  • SSDEEP

    1536:e4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:eIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 34d641fcd4d1f704ec3dbc5f68941f591c21dd59d4e3d51008d03f83cda0240cN
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections