General

  • Target

    35086af08b46c08fa2def72fe7c0de1ca5decec07e4daed9c7ab8e86ab2b58abN

  • Size

    248KB

  • MD5

    1c53550c6a80329782a6c72f8463a0c0

  • SHA1

    bd723af561eee2178acefd5c4da210ec51453c1b

  • SHA256

    35086af08b46c08fa2def72fe7c0de1ca5decec07e4daed9c7ab8e86ab2b58ab

  • SHA512

    bb0e181c2361f97d5eafea57f4d319a149782bbf7a5579a3689bd300ba0e44e56edb599f7c94d8c5f67c2ef45f5400e19b3667ff6e0eef08c8a968c6fa1c8308

  • SSDEEP

    1536:14d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:1IdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 35086af08b46c08fa2def72fe7c0de1ca5decec07e4daed9c7ab8e86ab2b58abN
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections