General

  • Target

    db7fd9d0c2d889846bada4b4a8834fc0N.exe

  • Size

    316KB

  • Sample

    240817-k4t7naxgng

  • MD5

    db7fd9d0c2d889846bada4b4a8834fc0

  • SHA1

    3222c11400124cbdf4ba2fc60e94329e36ee0651

  • SHA256

    9f50f624547e4e800737e131524259ee09c6454e1821de6c34aadf1d58029cd6

  • SHA512

    a321808f42086abc4c31f761cf7b7417a99dfe25b450cb3aa7197dd44598a885fc414825e954d89cd46f6968d472224f0344941db169f9abb00a6523fa48e148

  • SSDEEP

    1536:n4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:nIdseIO+EZEyFjEOFqTiQmKnOHjzU

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      db7fd9d0c2d889846bada4b4a8834fc0N.exe

    • Size

      316KB

    • MD5

      db7fd9d0c2d889846bada4b4a8834fc0

    • SHA1

      3222c11400124cbdf4ba2fc60e94329e36ee0651

    • SHA256

      9f50f624547e4e800737e131524259ee09c6454e1821de6c34aadf1d58029cd6

    • SHA512

      a321808f42086abc4c31f761cf7b7417a99dfe25b450cb3aa7197dd44598a885fc414825e954d89cd46f6968d472224f0344941db169f9abb00a6523fa48e148

    • SSDEEP

      1536:n4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:nIdseIO+EZEyFjEOFqTiQmKnOHjzU

    • Neconyd

      Neconyd is a trojan written in C++.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks