Overview

overview

10

Static

static

10

dfd5c3d41f...6c.exe

windows7-x64

10

dfd5c3d41f...6c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dfd5c3d41fc6abc3501e291fa0a459f7d2db837539f7d5aa3ea78b8a1d7ccc6c

  • Size

    35KB

  • MD5

    c258d1a6112e858e8fe9ae6687b6c781

  • SHA1

    8ba87d83ad2a65f4dad13d2ee99d6e5fae7c42e2

  • SHA256

    dfd5c3d41fc6abc3501e291fa0a459f7d2db837539f7d5aa3ea78b8a1d7ccc6c

  • SHA512

    7026c2196c2edde2603aeda78090e708d6963eab46e0733c272b9e28f2ea67c1bc0dd11563474d2e63b42c909180e66304bfee08c91d92b411af84c196e1408c

  • SSDEEP

    768:F6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:I8Z0kA7FHlO2OwOTUtKjpB

Score
10/10
upxneconyd

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
    neconyd
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • dfd5c3d41fc6abc3501e291fa0a459f7d2db837539f7d5aa3ea78b8a1d7ccc6c
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections