General

  • Target

    fe938fc1f1d1b256452a33a8ea818860N.exe

  • Size

    248KB

  • Sample

    240819-xt3r9svdlp

  • MD5

    fe938fc1f1d1b256452a33a8ea818860

  • SHA1

    532f79a4fe37af20702ceabb1f5a4b2ae97da60a

  • SHA256

    fde4d6c871af375b34507d322700376e5d7c8e3b9bde60285d2d4ab5d6c94853

  • SHA512

    fb65e388f3c5b083f5848fa8c08147fb5824d1ce72b9653a1b78255de56f91527115849a51bd6af336459b49e2a31edb7bd77873fd833d4f2b66e49004c432c4

  • SSDEEP

    1536:M4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:MIdseIO+EZEyFjEOFqTiQmGnOHjzU

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      fe938fc1f1d1b256452a33a8ea818860N.exe

    • Size

      248KB

    • MD5

      fe938fc1f1d1b256452a33a8ea818860

    • SHA1

      532f79a4fe37af20702ceabb1f5a4b2ae97da60a

    • SHA256

      fde4d6c871af375b34507d322700376e5d7c8e3b9bde60285d2d4ab5d6c94853

    • SHA512

      fb65e388f3c5b083f5848fa8c08147fb5824d1ce72b9653a1b78255de56f91527115849a51bd6af336459b49e2a31edb7bd77873fd833d4f2b66e49004c432c4

    • SSDEEP

      1536:M4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:MIdseIO+EZEyFjEOFqTiQmGnOHjzU

    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks