Overview

overview

10

Static

static

10

7930f05140...eN.exe

windows7-x64

10

7930f05140...eN.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7930f051406d9bad3f1cf9802f789d2c332823816b01aac6aa97bfef6b9a7b2eN

  • Size

    316KB

  • MD5

    ee490282530984427a022eca112a9160

  • SHA1

    b64d8879eaee1b6254aa885392861ed52fb1a0bf

  • SHA256

    7930f051406d9bad3f1cf9802f789d2c332823816b01aac6aa97bfef6b9a7b2e

  • SHA512

    c4428d83bd8edb3df532f12c97bc04aeccf57b9e7e5dd6c0a5bba7a1c43358b91b2a9946b8859a2e983ecfb76735f19804cb05379ca8fb6b255028df4ba5c391

  • SSDEEP

    1536:i4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:iIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10
upxneconyd

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
    neconyd
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7930f051406d9bad3f1cf9802f789d2c332823816b01aac6aa97bfef6b9a7b2eN
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections