Overview

overview

10

Static

static

10

c719d39cda...eN.exe

windows7-x64

10

c719d39cda...eN.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c719d39cda72304fb0feeaae5a9ab8468232b92d96ac8b8468dc553f7f7687ceN

  • Size

    316KB

  • MD5

    2a7ed33f7d744e4209041cd5fdf58860

  • SHA1

    c3b3c1025aed2f4711622ca33f8ee3b4466b8a1b

  • SHA256

    c719d39cda72304fb0feeaae5a9ab8468232b92d96ac8b8468dc553f7f7687ce

  • SHA512

    b745503ddd905fa246be15a287749c095e076b6ee2f37542d20118ace2bbf3ba21bd10f55a1e4a20b2ca5433b310a7b1b9515433b780c65bea4935a4aaec5f8f

  • SSDEEP

    1536:g4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:gIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10
upxneconyd

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
    neconyd
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c719d39cda72304fb0feeaae5a9ab8468232b92d96ac8b8468dc553f7f7687ceN
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections