General

  • Target

    2c88dedaf9e39e862e8bcea90b5ba0bfc75aed49bbd4775d12f4e5d2129a2cd1

  • Size

    316KB

  • MD5

    33c1a151c6142cfac3611a2905cb9c13

  • SHA1

    be6e88b80808b3c1c2758771e68220b74c03934f

  • SHA256

    2c88dedaf9e39e862e8bcea90b5ba0bfc75aed49bbd4775d12f4e5d2129a2cd1

  • SHA512

    3d7971027d3b91c95a4a86c64d1952135cec4fa36bf2a2d688566966213ad7b6695155c8576bfc31b725b384d0339593efc43300ad4b36916d0c8a0d55433ebf

  • SSDEEP

    1536:U4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:UIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2c88dedaf9e39e862e8bcea90b5ba0bfc75aed49bbd4775d12f4e5d2129a2cd1
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections