General

  • Target

    f22f459c1eb8881574f66dc23443c3efb8d958b094568f71fd271e0728c8392cN

  • Size

    316KB

  • MD5

    1059238f4e196cf98f32052ef2fcfef0

  • SHA1

    87fe175a357fe2ddba0bdc7b64cc80325628dda9

  • SHA256

    f22f459c1eb8881574f66dc23443c3efb8d958b094568f71fd271e0728c8392c

  • SHA512

    9ae743a848f6d117922a5af48f6ad45a704540e41c11ea1db254cfe38d89f19eb224775332d02a8d2ed68e430d86f190fae497779617a6a64d639cfdeb0c7011

  • SSDEEP

    1536:Z4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:ZIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f22f459c1eb8881574f66dc23443c3efb8d958b094568f71fd271e0728c8392cN
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections