General

  • Target
    55f2689eb148461cadaed5f5c970ebe830143848208b813de2819defa118356b.exe
  • Size 80KB
  • Sample241102-e9nn6sygqa
  • SHA256 55f2689eb148461cadaed5f5c970ebe830143848208b813de2819defa118356b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • neconyd

C2
  • http://ow5dirasuek.com/

  • http://mkkuei4kdsz.com/

  • http://lousta.net/

Signatures

File Explorer

  • 55f2689eb148461cadaed5f5c970ebe830143848208b813de2819defa118356b.exe
    .exe 80KB

55f2689eb148461cadaed5f5c970ebe830143848208b813de2819defa118356b.exe

  • IMPHASH 08b67a9663d3a8c9505f3b2561bbdd1c
  • SHA256 55f2689eb148461cadaed5f5c970ebe830143848208b813de2819defa118356b
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
64:a2:c8:3d:61:b6:3a:19:83:8c:56:1c:57:d2:7f:a5:3e:1e:d6:96:f9:e1:82:09:29:21:60:78:c2:84:73:4b
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains

Oct 29, 2024

PE Signature issue

Digest
64:a2:c8:3d:61:b6:3a:19:83:8c:56:1c:57:d2:7f:a5:3e:1e:d6:96:f9:e1:82:09:29:21:60:78:c2:84:73:4b
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains

Oct 29, 2024

Minor OS version
0
Major OS version
4
Entry point
45894
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths