General

  • Target

    98bda23898b8e0477eaf56f8eb896f8db439689edc7ad6a4b69d0149aaf5ad65

  • Size

    248KB

  • Sample

    240728-cbg3ma1flq

  • MD5

    e6335d104647b522190b42c68519dc49

  • SHA1

    cab9c2a326e238f95f71a44d60169840ca2fe20f

  • SHA256

    98bda23898b8e0477eaf56f8eb896f8db439689edc7ad6a4b69d0149aaf5ad65

  • SHA512

    dba228dea84e648ddb5fd29f37308939ce2d59dd484887f467ab5b2b5acbe6303a76d3c0758a7e9d9bdc40580715dcdef31ff3bdc7551a71586d1bbfa10430a6

  • SSDEEP

    1536:Q4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:QIdseIO+EZEyFjEOFqTiQmGnOHjzU

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      98bda23898b8e0477eaf56f8eb896f8db439689edc7ad6a4b69d0149aaf5ad65

    • Size

      248KB

    • MD5

      e6335d104647b522190b42c68519dc49

    • SHA1

      cab9c2a326e238f95f71a44d60169840ca2fe20f

    • SHA256

      98bda23898b8e0477eaf56f8eb896f8db439689edc7ad6a4b69d0149aaf5ad65

    • SHA512

      dba228dea84e648ddb5fd29f37308939ce2d59dd484887f467ab5b2b5acbe6303a76d3c0758a7e9d9bdc40580715dcdef31ff3bdc7551a71586d1bbfa10430a6

    • SSDEEP

      1536:Q4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:QIdseIO+EZEyFjEOFqTiQmGnOHjzU

    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks