General

  • Target

    50ca8ba931408bdb856d3727add9f92a42e5461fe13fe834999f64df44596f8fN

  • Size

    316KB

  • MD5

    08cc58730e54602016b03d9918ad2940

  • SHA1

    4d53ad74cb0f4e5cf11be9912c85eaab84771fc7

  • SHA256

    50ca8ba931408bdb856d3727add9f92a42e5461fe13fe834999f64df44596f8f

  • SHA512

    16cb3a3a117ee06b353006e0cd9a717c559e0dea695614b9e84d727c3da801df26a1aed01440fbfe5914f0c83ffc706f1bcf892fabc1d4e3cb33ace64a98afa1

  • SSDEEP

    1536:C4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:CIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 50ca8ba931408bdb856d3727add9f92a42e5461fe13fe834999f64df44596f8fN
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections