General

  • Target

    466014431d635c270114e90143afe50867418907384f44e5b7f3f692996f9f8bN

  • Size

    248KB

  • MD5

    92d4f14b9ceb0e7a9d88fa76e090c6e0

  • SHA1

    5fe13beb4f04e5eb07d57475662158a5645299ea

  • SHA256

    466014431d635c270114e90143afe50867418907384f44e5b7f3f692996f9f8b

  • SHA512

    d62c87e7707c97fec1144754c7e3df6aabdf9ef7109afc5a254bf9bf4e1e8b99101f9505bac4e7cc7f8b43d26932dfa8781f14b9d56711f45e2fc6243c56a1a8

  • SSDEEP

    1536:v4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:vIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 466014431d635c270114e90143afe50867418907384f44e5b7f3f692996f9f8bN
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections