General

  • Target

    8168c9555358ef6882fe84c29017c9bd32921f80bcda756b90f1994291c633cf

  • Size

    61KB

  • MD5

    d95ce442176fb8bb198dd1be4850d7c8

  • SHA1

    b739fdff2b4a1c04c8dddef6d6ae010f74ec57be

  • SHA256

    8168c9555358ef6882fe84c29017c9bd32921f80bcda756b90f1994291c633cf

  • SHA512

    6815e5f6d516fab8749483b19551ba628bada52add3c46da8ce79423e3398ad5bdc3a4731aa50237d3ceaefee7b1d1162fff06d1c4b2138b7ac145f2e0e6ffa1

  • SSDEEP

    1536:Gd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:+dseIOMEZEyFjEOFqTiQmFl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8168c9555358ef6882fe84c29017c9bd32921f80bcda756b90f1994291c633cf
    .exe windows:4 windows x86 arch:x86

    08b67a9663d3a8c9505f3b2561bbdd1c


    Headers

    Imports

    Sections