Overview

overview

10

Static

static

10

6a347ba9db...18.exe

windows7-x64

10

6a347ba9db...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6a347ba9db13524b94bc48f80d19e930.jaffacakes118.exe

  • Size

    35KB

  • MD5

    6a347ba9db13524b94bc48f80d19e930

  • SHA1

    22af54d1fd131b27bd6ab9ceab1c654782ab6a47

  • SHA256

    fc453431009bfbe39a83174b9c345901aeb35342fc615edd700bc8ca7b260ead

  • SHA512

    3583aa9895d9aeb723d9576140ba6016b43d021bc03917f9d9cbb6c5ecf1c1b331f6bcac09dafb691448ced6a09d81d1707e1fa60cb3c526c55f38f7218b9492

  • SSDEEP

    768:56vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:U8Z0kA7FHlO2OwOTUtKjpB

Score
10/10
upxneconyd

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
    neconyd
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6a347ba9db13524b94bc48f80d19e930.jaffacakes118.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections