Overview

overview

10

Static

static

10

617b0a7f05...9N.exe

windows7-x64

10

617b0a7f05...9N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    617b0a7f0543d78298f6cdc7d6d98987afd25f55e2ebee21ecf0b7503dd78529N

  • Size

    248KB

  • MD5

    d189162ea02331689d6dc769e36f4ae0

  • SHA1

    3ae9a0fcc31a6590d748e16c8c23bd48202d0be6

  • SHA256

    617b0a7f0543d78298f6cdc7d6d98987afd25f55e2ebee21ecf0b7503dd78529

  • SHA512

    e3a2e1279007677c5725cb63471802a44f89fe6baa30fe33f7c0d5e982669c0ae3d19bad5f37cc6713f28085cccc0cae036c0caffe77d088ec29e6f3b17f9402

  • SSDEEP

    1536:T4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:TIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10
upxneconyd

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
    neconyd
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 617b0a7f0543d78298f6cdc7d6d98987afd25f55e2ebee21ecf0b7503dd78529N
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections