Overview

overview

10

Static

static

10

3c96243fa9...0N.exe

windows7-x64

10

3c96243fa9...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c96243fa9b2c6401dec1c01aa6ba790N.exe

  • Size

    248KB

  • MD5

    3c96243fa9b2c6401dec1c01aa6ba790

  • SHA1

    6b656731882504e06382d6fbe8ead413593a6bb1

  • SHA256

    03a410ae56c0c8dcef892ba843c7914bf2d424def68629f84a26a8219a8d2e40

  • SHA512

    e57b062bca3662458c720a66d756198dfad2af50e1fb5c72f01bb42facc8bc21f9884b076828ee7886a508af8fdbe52fd659c368e66619f340d860c54d1a44db

  • SSDEEP

    1536:O4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:OIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10
upxneconyd

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
    neconyd
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3c96243fa9b2c6401dec1c01aa6ba790N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections