Overview

overview

10

Static

static

10

5bbe4ca48a...4N.exe

windows7-x64

10

5bbe4ca48a...4N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5bbe4ca48ae0f0144ac2ef3c9720fd3eb64993db49a3fbe73a8d81497edb3dd4N

  • Size

    248KB

  • MD5

    55437e04b6ba988ff9ea6d71a2319ab0

  • SHA1

    29d7eaf0e8c904fb0029777b52762730432340c6

  • SHA256

    5bbe4ca48ae0f0144ac2ef3c9720fd3eb64993db49a3fbe73a8d81497edb3dd4

  • SHA512

    55192dab05d8c742385a89b7a8e0481998ec3eda998ee9cacb40ec121b25c6bc78842e8c9b894c5e3c5cbe3ba9ce94a18b8fefbb344bf9bcef56c04319aaa139

  • SSDEEP

    1536:24d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:2IdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10
upxneconyd

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
    neconyd
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5bbe4ca48ae0f0144ac2ef3c9720fd3eb64993db49a3fbe73a8d81497edb3dd4N
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections