Overview

overview

10

Static

static

10

1c6fadc194...f6.exe

windows7-x64

10

1c6fadc194...f6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1c6fadc19410c0a4c6c013bb7893e0cc055bd6976b1a5b6bf0158fa1806f0af6

  • Size

    316KB

  • MD5

    5c6748534e98e94b490864182de78a64

  • SHA1

    e16014550ec01ada5bae24ce8278b361dc15b7cd

  • SHA256

    1c6fadc19410c0a4c6c013bb7893e0cc055bd6976b1a5b6bf0158fa1806f0af6

  • SHA512

    6eaf7b1b38b4c526f0d7c25224e90c30e355128321eee3045120a85b3342e6bb5428ae1260bd2dae6e221e48a647c5bf29ce1c5c43d85b3d30cb85251fbfd99e

  • SSDEEP

    1536:A4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:AIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10
upxneconyd

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
    neconyd
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1c6fadc19410c0a4c6c013bb7893e0cc055bd6976b1a5b6bf0158fa1806f0af6
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections