Overview

overview

10

Static

static

10

fbf09e66dd...9N.exe

windows7-x64

10

fbf09e66dd...9N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fbf09e66dd9594801fb7bd95720ec9e820560cec3e042cac883c94d1fb4a3ee9N

  • Size

    248KB

  • MD5

    722b5210367978116a8754f0223594b0

  • SHA1

    4466bd35a0c2f6fb5a8f7b77ce43e079ef214ae4

  • SHA256

    fbf09e66dd9594801fb7bd95720ec9e820560cec3e042cac883c94d1fb4a3ee9

  • SHA512

    ab2a312d93b3aa04a1f914740f4aafc9556ca0b0fab98e1f106a99c37c8139ffe56cb83c6212d0c9330c6db5fbf706482106e0feca939be428fca23833d63d33

  • SSDEEP

    1536:l4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:lIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10
upxneconyd

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
    neconyd
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fbf09e66dd9594801fb7bd95720ec9e820560cec3e042cac883c94d1fb4a3ee9N
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections