General

  • Target

    bdb8a2d851f68f520db79a9711d5ea31dfac2111ed5297bd870e503ecd0b5f8f

  • Size

    316KB

  • Sample

    240817-e4vwaszhjm

  • MD5

    a477642d0f3d937254a8d6e3440ca427

  • SHA1

    0f186def4dc3a87e19e8e8ce347d188276bfced3

  • SHA256

    bdb8a2d851f68f520db79a9711d5ea31dfac2111ed5297bd870e503ecd0b5f8f

  • SHA512

    b2a3787cacaab9df8386e7721b64c6c8a399e2c136b5a5ebafc18d3dba3502cbf591d308498f2c579b719e3701b9cbb1f8957281bdb2955a7caf41018cf29628

  • SSDEEP

    1536:R4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:RIdseIO+EZEyFjEOFqTiQmKnOHjzU

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      bdb8a2d851f68f520db79a9711d5ea31dfac2111ed5297bd870e503ecd0b5f8f

    • Size

      316KB

    • MD5

      a477642d0f3d937254a8d6e3440ca427

    • SHA1

      0f186def4dc3a87e19e8e8ce347d188276bfced3

    • SHA256

      bdb8a2d851f68f520db79a9711d5ea31dfac2111ed5297bd870e503ecd0b5f8f

    • SHA512

      b2a3787cacaab9df8386e7721b64c6c8a399e2c136b5a5ebafc18d3dba3502cbf591d308498f2c579b719e3701b9cbb1f8957281bdb2955a7caf41018cf29628

    • SSDEEP

      1536:R4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:RIdseIO+EZEyFjEOFqTiQmKnOHjzU

    • Neconyd

      Neconyd is a trojan written in C++.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks