General

  • Target

    bbd8106216d4b1394a650407d8ab37127b254d544e0338d2d0ffd82183d5d590N

  • Size

    316KB

  • MD5

    855c972457ee6388ccc91c80943827c0

  • SHA1

    6fae61ad1f41d92ed6ef627410b0907c5979f52d

  • SHA256

    bbd8106216d4b1394a650407d8ab37127b254d544e0338d2d0ffd82183d5d590

  • SHA512

    32e330939c881f62373c053cc65f450fcaf1aa19ebba97780a3798f2290fc106fcd9efdfe56ae287f02361050f7f7d6094d4b1544fd97169e76fc0f1e4dfd715

  • SSDEEP

    1536:y4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:yIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bbd8106216d4b1394a650407d8ab37127b254d544e0338d2d0ffd82183d5d590N
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections