General

  • Target

    3d590390b510692c8a40c15636d75bc0004dc0b3d4957d534a5bbbf04c992e6bN

  • Size

    248KB

  • MD5

    e46a657f6b2e24a0b1723b4ec8074600

  • SHA1

    0a00995cac52238d0e6f21e63ddfe66e886d8b48

  • SHA256

    3d590390b510692c8a40c15636d75bc0004dc0b3d4957d534a5bbbf04c992e6b

  • SHA512

    a15c36af278613b85649bd2a0f21f29f18c425d4e54c0e1d0ffaec36b688fec100381bc4edd6bb0432adad6b32a9bbfe523a59fa9388d2a240f132bf674afdcf

  • SSDEEP

    1536:X4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:XIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3d590390b510692c8a40c15636d75bc0004dc0b3d4957d534a5bbbf04c992e6bN
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections