Overview

overview

10

Static

static

10

7261bd0a41...13.exe

windows7-x64

10

7261bd0a41...13.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7261bd0a4198139bee091d373bd9350628dfa78ce2255d3d5600366112125513

  • Size

    35KB

  • MD5

    6f25869a0416dea8b2f149373f8df9ac

  • SHA1

    1fda2079a96df5422a820d53b4b8a5dd6de5e32a

  • SHA256

    7261bd0a4198139bee091d373bd9350628dfa78ce2255d3d5600366112125513

  • SHA512

    70f72234a30bf3ab5a4a1671267edce349486b250fb6537b4a57c4e066a6c46ec6bbae8342d313243b0d2bde897d471903a2524cc51514d5745eff2547ede57d

  • SSDEEP

    768:Y6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:f8Z0kA7FHlO2OwOTUtKjpB

Score
10/10
upxneconyd

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
    neconyd
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7261bd0a4198139bee091d373bd9350628dfa78ce2255d3d5600366112125513
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections