Overview

overview

10

Static

static

10

1e775c50a1...fN.exe

windows7-x64

10

1e775c50a1...fN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1e775c50a17dd96a51fc665b1d8b57957d16ba194055fa993159c92a4fcfdbcfN

  • Size

    248KB

  • MD5

    87ce2db75b8b4b5153e645cc049bef90

  • SHA1

    b32bd226aa95263556899e78df6805ff29372732

  • SHA256

    1e775c50a17dd96a51fc665b1d8b57957d16ba194055fa993159c92a4fcfdbcf

  • SHA512

    62ba556ab9ef7d5609ae85eceeb82e145a68c086095e86eb37442462a359e8fc872bbedad0a29f00d79e859f07583fb56f15213ebb7e04148efb038c42794543

  • SSDEEP

    1536:d4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:dIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10
upxneconyd

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
    neconyd
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1e775c50a17dd96a51fc665b1d8b57957d16ba194055fa993159c92a4fcfdbcfN
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections