Overview

overview

10

Static

static

10

07050b3a92...db.exe

windows7-x64

10

07050b3a92...db.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    07050b3a928e4768931fcba447c14f69456e62f36ccfbd0ac5bf3f4f3cb2c6db.exe

  • Size

    35KB

  • MD5

    e5f8f86312e26a913a5d466933a00460

  • SHA1

    a31be998c105679763017f8db1d01f284e903579

  • SHA256

    07050b3a928e4768931fcba447c14f69456e62f36ccfbd0ac5bf3f4f3cb2c6db

  • SHA512

    4be2b3e3e5c0d2e8e5b99087195591a0d946434629e66af61f9c1ffcff672927f28f2880507fec93c6e9a942c9faeea34cd7490dafe4db4861b1127835842660

  • SSDEEP

    768:V6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:Y8Z0kA7FHlO2OwOTUtKjpB

Score
10/10
upxneconyd

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
    neconyd
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 07050b3a928e4768931fcba447c14f69456e62f36ccfbd0ac5bf3f4f3cb2c6db.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections