Overview

overview

10

Static

static

10

4f8b5ded61...0N.exe

windows7-x64

10

4f8b5ded61...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4f8b5ded61b51de6d2d27f0e2a473a30N.exe

  • Size

    248KB

  • MD5

    4f8b5ded61b51de6d2d27f0e2a473a30

  • SHA1

    3d58be86f9b50ae09a0a0a71521297dd241aefc6

  • SHA256

    feb4e600299722d15fa622c2bb7ad6c8a17560729c509544fed85cba950bb707

  • SHA512

    ebc97a82579408b5d44440877927033517f21d24f83d0a1147b8840585c3f43d726067d12112fab1029e8e0abc9f781748de86f1defd4f36c89865b980dccb4b

  • SSDEEP

    1536:I4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:IIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10
upxneconyd

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
    neconyd
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4f8b5ded61b51de6d2d27f0e2a473a30N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections