General

  • Target

    262dc9cad3083093b1dbe0781166097ff71e0b9385d566d96951c96ba28ea3cd.exe

  • Size

    316KB

  • MD5

    4cc677a041a0463a18c8d5fab82b8608

  • SHA1

    30c556ae334d990507fdaebc5fbc14ce779d084c

  • SHA256

    262dc9cad3083093b1dbe0781166097ff71e0b9385d566d96951c96ba28ea3cd

  • SHA512

    17710740dec47691450e2cbfbaa35a9b67552cbdb3cb64dede9b855fa6b2a71ec1db9e58385aff285df0d9b6d152ccd17a4fa1a622800a6c0fb7843cc31a500d

  • SSDEEP

    1536:G4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzUJ:GIdseIO+EZEyFjEOFqTiQmKnOHjzUJ

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 262dc9cad3083093b1dbe0781166097ff71e0b9385d566d96951c96ba28ea3cd.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections