Overview

overview

10

Static

static

10

a541272110...5N.exe

windows7-x64

10

a541272110...5N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a541272110e2bb49452998dac1c929f2119f16c4f5442ef7b06b42f3773d7d75N

  • Size

    248KB

  • MD5

    78635bbf7bd51fef0b135e6006d9ad90

  • SHA1

    df176a8eed85f6a378b38579c762fdf0f8d62106

  • SHA256

    a541272110e2bb49452998dac1c929f2119f16c4f5442ef7b06b42f3773d7d75

  • SHA512

    1282cef23c89fed1d411fd36e940f9d0ed5191b559e1baf4ea2d0b5e45efa6e788f2563b1aeded09944f1596d7c9a792e4f7b4933ced739ec34025571b047ce9

  • SSDEEP

    1536:04d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:0IdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10
upxneconyd

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
    neconyd
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a541272110e2bb49452998dac1c929f2119f16c4f5442ef7b06b42f3773d7d75N
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections