General

  • Target

    3b4a1f0ea83dc807c446b916779759a7473ccaac9d0d56d1634434afc69534ceN.exe

  • Size

    316KB

  • MD5

    2d126c47ea36142a1c398b82af8630f0

  • SHA1

    6c780c0144b3596c0c416b7d6a5e7c7202b93c2d

  • SHA256

    3b4a1f0ea83dc807c446b916779759a7473ccaac9d0d56d1634434afc69534ce

  • SHA512

    cce97d7cf76c137111d996bac664ef2c0e6a63a27b0bb1831888497ddb80f509fa13d94dc0133f89f39e50a6c3b932be3d22dda2716c5eb593feff4e324232a2

  • SSDEEP

    1536:G4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:GIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3b4a1f0ea83dc807c446b916779759a7473ccaac9d0d56d1634434afc69534ceN.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections