General

  • Target

    1745d732bd367949e803f172eb7313cc868fa4e734797f136ded334007758f83

  • Size

    316KB

  • MD5

    9ccbc5594467b9759dcba3819281ec64

  • SHA1

    6999f28937468486caf5afbc9d36525d5b63f1d4

  • SHA256

    1745d732bd367949e803f172eb7313cc868fa4e734797f136ded334007758f83

  • SHA512

    88cfeb5028b93cc7d94be0cc992c71926819f4411d537974d36fb699f8175a438d65e790d96679a418b43e626b5f5819b46e760e2fe3205ede97aee027fb4735

  • SSDEEP

    1536:p4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:pIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1745d732bd367949e803f172eb7313cc868fa4e734797f136ded334007758f83
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections