General

  • Target

    0c11e21cde5de4e4d7cc16f2ba824920N.exe

  • Size

    248KB

  • Sample

    240723-z4c1psygkk

  • MD5

    0c11e21cde5de4e4d7cc16f2ba824920

  • SHA1

    6edd7f365d2050f5fcceadbe2af1698ae4d2c74a

  • SHA256

    0f6f998a6506ca1388136ed189eb64ba73ed4246fe448c4c8df1df241a80c031

  • SHA512

    64e3a43c536721c68376f70790f092dd8b723804bc80a8e7849085bb0c9f0bd7c7e75835b7694eed4c47c765b2dd0d0855e6c6da564ab0174735258a447b6b65

  • SSDEEP

    1536:A4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:AIdseIO+EZEyFjEOFqTiQmGnOHjzU

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      0c11e21cde5de4e4d7cc16f2ba824920N.exe

    • Size

      248KB

    • MD5

      0c11e21cde5de4e4d7cc16f2ba824920

    • SHA1

      6edd7f365d2050f5fcceadbe2af1698ae4d2c74a

    • SHA256

      0f6f998a6506ca1388136ed189eb64ba73ed4246fe448c4c8df1df241a80c031

    • SHA512

      64e3a43c536721c68376f70790f092dd8b723804bc80a8e7849085bb0c9f0bd7c7e75835b7694eed4c47c765b2dd0d0855e6c6da564ab0174735258a447b6b65

    • SSDEEP

      1536:A4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:AIdseIO+EZEyFjEOFqTiQmGnOHjzU

    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks