General

  • Target

    e40c28e1e2f04b229ca32e0daeab2d1c9376af1c28d0117ff4b0c62a40108fc2N

  • Size

    248KB

  • MD5

    d6e3b784efbc4a7ad8eabbf0ff1c7fb0

  • SHA1

    e669a79a0d915586b7eb6595cbf61b4cc08b0575

  • SHA256

    e40c28e1e2f04b229ca32e0daeab2d1c9376af1c28d0117ff4b0c62a40108fc2

  • SHA512

    a4b421a06733602f5bb84a808f936de308413aa5b4ed27b4b0556727f41bfa451c3d47b9503e32ac4815168161a3b1d8a9197221587b42a8ea55fdeabde99259

  • SSDEEP

    1536:T4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:TIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e40c28e1e2f04b229ca32e0daeab2d1c9376af1c28d0117ff4b0c62a40108fc2N
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections