General

  • Target

    14e8e09c9a55d405453eedcb1a112a59c7789bee8602876ba4a33bf32f2b50ceN

  • Size

    248KB

  • MD5

    49e4e6e42ecc1ef3e039eb8a46a4bf60

  • SHA1

    ef70dd085b0c4c06d03300110729bd8672f20f60

  • SHA256

    14e8e09c9a55d405453eedcb1a112a59c7789bee8602876ba4a33bf32f2b50ce

  • SHA512

    0d275fd418399b395a818a04064484d85cf48641425c7d2446cb2752134493856b6a29c7bc59e1820d78e6a5bc556665ec20c0decc71053a04c27e720abfbb1b

  • SSDEEP

    1536:S4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:SIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 14e8e09c9a55d405453eedcb1a112a59c7789bee8602876ba4a33bf32f2b50ceN
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections