Overview

overview

10

Static

static

10

9f967814d7...0N.exe

windows7-x64

10

9f967814d7...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9f967814d7f5ea8db3d384f46320f5d0N.exe

  • Size

    248KB

  • MD5

    9f967814d7f5ea8db3d384f46320f5d0

  • SHA1

    5478da41218a8bddc0decd7ca934dec30456a9d9

  • SHA256

    4a3aa832f2ef030fdab036a1e07d60c4d4826bf1b139d7361342a6e0b8ccb0a3

  • SHA512

    c8af09de7b4c41b46343b126e6a22cec21aec1accafcb1f0f85dc72c81a1287dbaa4d6c942b9da54b226593d22a3c5cd4fd4ad47f1f91e5071aedb665441b640

  • SSDEEP

    1536:O4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:OIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10
upxneconyd

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
    neconyd
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9f967814d7f5ea8db3d384f46320f5d0N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections