Overview

overview

10

Static

static

10

397b1d6e57...0N.exe

windows7-x64

10

397b1d6e57...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    397b1d6e57f6e74066e409f39710fa10N.exe

  • Size

    35KB

  • MD5

    397b1d6e57f6e74066e409f39710fa10

  • SHA1

    92f3919976f17ca61162889ca34826d80afa85b6

  • SHA256

    d52ef45f76c43fdcae29d4ea0f868dd48285b371d9e939edf98405c70bb15555

  • SHA512

    e7376f80e7c1e352b632495a985ec49203af8a4f258c36d1f7f57f6c4f85fc6d6a3eb499f20e8d9f1a5d723a078bc24a562411a2462e4c6bd84f97cbe6774eca

  • SSDEEP

    768:56vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:U8Z0kA7FHlO2OwOTUtKjpB

Score
10/10
upxneconyd

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
    neconyd
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 397b1d6e57f6e74066e409f39710fa10N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections