General

  • Target

    74fe5a914e6d9e644efd939c9d7a203079727f6045001eb591c9053f69bc80ecN

  • Size

    248KB

  • MD5

    cbc4798035228d89546bd30816b2d110

  • SHA1

    7df3bf181f829171cbb13091fdf42776cdfdb5ca

  • SHA256

    74fe5a914e6d9e644efd939c9d7a203079727f6045001eb591c9053f69bc80ec

  • SHA512

    ded8bfc6e09d550a3c2f312c3f5b28e976a511107587d5a8e28150c620ef3ec6e0447215fd0976802d948188f188cc8a768c9df2e1816c23d93e6123d089a9b9

  • SSDEEP

    1536:aded9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZdnzOGP97H:1dseIOMEZEyFjEOFqTiQm7nzX7H

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 74fe5a914e6d9e644efd939c9d7a203079727f6045001eb591c9053f69bc80ecN
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections