General

  • Target

    a14fc5f51dfd885acec1791a743f0a3ef9976d136a454b5729da5ed6e58afb6f

  • Size

    316KB

  • MD5

    8caae0fb9ee969631fff226e79eff9b3

  • SHA1

    be20b9d7d09e1ebf789b5eabe835840d109117a3

  • SHA256

    a14fc5f51dfd885acec1791a743f0a3ef9976d136a454b5729da5ed6e58afb6f

  • SHA512

    0a452706932fac6c7baf64e854953939a01b6d4afe14811d8ff3068a485315e9ef5c1440f9e944ca93a5eeade6e4d0fc7185a27804a7acb75edb542cc64bc2ab

  • SSDEEP

    1536:v4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:vIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a14fc5f51dfd885acec1791a743f0a3ef9976d136a454b5729da5ed6e58afb6f
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections