MALICIOUS — f174bba86d653d8d7e44bb5963ac255135b72954603c81621b23602c68679062

MALICIOUS — f174bba86d653d8d7e44bb5963ac255135b72954603c81621b23602c68679062 is a pe sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (95/100), attributed to the Neyndy family. 6 of 52 detection engines flagged it.

Identification

SHA-256: f174bba86d653d8d7e44bb5963ac255135b72954603c81621b23602c68679062
SHA-1: eca80700d314238898abc4fba1736cf49bb75dfb
MD5: 6ccb3d9151500abe3ad2fcb7ae307496
imphash: f1a539a5b71ad53ac586f053145f08ec
ssdeep: 24576:SrQKKycPHtj0pVdXQps9k210B1EgIuqQjxgabv2GUvd2PSH:SrfQAgsq2A6gIu5jVUoPSH
TLSH: T16A5223ABF8C28C78F07748B116C721DD89121D7A0C181D158E635892686E9BB3BDF877
Submitted as: f174bba86d653d8d7e44bb5963ac255135b72954603c81621b23602c68679062
File type: pe · Size: 991616 bytes
Verdict: malicious (95/100) · Family: Neyndy

Detections (6 of 52 engines)

MalwareAnalyser heuristics (entropy/packer): UPX
ClamAV (daily): Win.Malware.Zusy-9957983-0
Detect It Easy (packer/type): DIE:UPX
Kaspersky (KVRT): Trojan.Win32.Agent.neyndy
Microsoft Defender: Trojan:Win32/Prepscram!pz
Emsisoft (Emergency Kit): Gen:Variant.Virus.8

Why this verdict

The malicious score of 95/100 is the fusion of 4 weighted signals:

ClamAV (daily) flagged Win.Malware.Zusy-9957983-0 (rule Win.Malware.Zusy-9957983-0) - engine signal, weight 0.90, confidence 0.95
Kaspersky (KVRT) flagged Trojan.Win32.Agent.neyndy (rule Trojan.Win32.Agent.neyndy) - engine signal, weight 0.55, confidence 0.85
Detect It Easy (packer/type) flagged DIE:UPX (rule DIE:UPX) - engine signal, weight 0.35, confidence 0.70
Packing/obfuscation: UPX, high-entropy-sections:UPX1 - static signal, weight 0.25, confidence 0.55

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded domains

z.eu

More Neyndy samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report