General

  • Target

    3ea38fe77606593574798e74c91c11ede3dfe0da173edf72e183afc4ead1b147N

  • Size

    248KB

  • MD5

    dfde65c4e94d2255c29e21461ede8de0

  • SHA1

    98695df6b7c2ab4bc85add5cd6b7e60eecbdf2fb

  • SHA256

    3ea38fe77606593574798e74c91c11ede3dfe0da173edf72e183afc4ead1b147

  • SHA512

    b54afc5240dfbe756ef8a10cfc075632f86a568409f3b2a2181e84d905fe945ba6e5e756e8cc289e862ca767626663fad02886d4fedb8f5d54fe5c848ecb21ae

  • SSDEEP

    1536:R4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:RIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3ea38fe77606593574798e74c91c11ede3dfe0da173edf72e183afc4ead1b147N
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections