General

  • Target

    9832c4e38ac40ea88fd85401a203c39373fa61b8be2bc62e280dfd0acc97c910N

  • Size

    248KB

  • MD5

    d59f3cea71bd925c626d67ac0c03b700

  • SHA1

    2414ba61db7cfbb2c35741a8ae357018016611ba

  • SHA256

    9832c4e38ac40ea88fd85401a203c39373fa61b8be2bc62e280dfd0acc97c910

  • SHA512

    401d4abfc282f01a518efee9716afbd5ffdb111456f3074e86edada9ebedf0e55f8f8f547ed1a8dd555f1e1e0842554e4d56ed9a2e1af4596fec4fddc317ec9f

  • SSDEEP

    1536:M4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:MIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9832c4e38ac40ea88fd85401a203c39373fa61b8be2bc62e280dfd0acc97c910N
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections