General

  • Target

    c23e04d7734c9b373181d8a0c0c2a4bfae31c1e846989ab2a2a42f661515cd7a

  • Size

    248KB

  • MD5

    75de311c650fac5420345c5f9e107d67

  • SHA1

    23f14f2f8fc947bbc0cb335675ac9a0007ef3795

  • SHA256

    c23e04d7734c9b373181d8a0c0c2a4bfae31c1e846989ab2a2a42f661515cd7a

  • SHA512

    4d16cfda05d7d137206f0164ee689ee892f7495b5d2722ee27545f609567b94afa76d261a743fb8b869cb54aee554763ab710c13ff638291c94123d824c6dd73

  • SSDEEP

    1536:u4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:uIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c23e04d7734c9b373181d8a0c0c2a4bfae31c1e846989ab2a2a42f661515cd7a
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections