General

  • Target

    200e7865119503561f818b254968ee45e2390262f0eac607f8b3252d8000d5fcN

  • Size

    316KB

  • MD5

    b2a8e5e98bb935a85144d38dc8ae1540

  • SHA1

    8d63ac56aafb9d2d50de4bbba9d89afff6ac7500

  • SHA256

    200e7865119503561f818b254968ee45e2390262f0eac607f8b3252d8000d5fc

  • SHA512

    c9c846c8cc4579418cc8e261cf3c216a888b41d4c5162211c4ebd45aa5be3b19b432efdf1ba4aafa4becd4a562bd52177efd27ae596f0aba253ce65393b05edd

  • SSDEEP

    1536:u4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:uIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 200e7865119503561f818b254968ee45e2390262f0eac607f8b3252d8000d5fcN
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections