Overview

overview

10

Static

static

10

670142a892...0N.exe

windows7-x64

10

670142a892...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    670142a8929a2077e18d67baccfb3c50N.exe

  • Size

    316KB

  • MD5

    670142a8929a2077e18d67baccfb3c50

  • SHA1

    3a05a6d3c077c9cf3cd6ffa410fee760e0ea2431

  • SHA256

    b9a985211f79d1d969f30a33050a5712c09b6be1927a131f4b0441d226c58e2d

  • SHA512

    35659d923acd8331047384dd9ffa7a0a57bff9a03de2c52b12842add3ff4d1cfcb7ce62e42db025c5375a1efcd2bbcad4e7cea00cceff33e2d1b9041baa5ed09

  • SSDEEP

    1536:64d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:6IdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10
upxneconyd

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
    neconyd
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 670142a8929a2077e18d67baccfb3c50N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections