General

  • Target

    23019e94a4949252103b0c4ceb8edb9abcd3e0f4b7fd291c35f52ff517493216

  • Size

    248KB

  • Sample

    240823-1h7tmaybnb

  • MD5

    38c9e48056133bb582ecdfe0def74983

  • SHA1

    f2b20332fd87ffc1df014293722a1f03f08150e2

  • SHA256

    23019e94a4949252103b0c4ceb8edb9abcd3e0f4b7fd291c35f52ff517493216

  • SHA512

    d5d193fbb321dc49d19dade8a6975d9c447329d0e99e26c151f86fbc4c5d39d0e6777aa22b82fad522d913d489f841af35c27daab6818276ba354210700ac8a4

  • SSDEEP

    1536:04d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:0IdseIO+EZEyFjEOFqTiQmGnOHjzU

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      23019e94a4949252103b0c4ceb8edb9abcd3e0f4b7fd291c35f52ff517493216

    • Size

      248KB

    • MD5

      38c9e48056133bb582ecdfe0def74983

    • SHA1

      f2b20332fd87ffc1df014293722a1f03f08150e2

    • SHA256

      23019e94a4949252103b0c4ceb8edb9abcd3e0f4b7fd291c35f52ff517493216

    • SHA512

      d5d193fbb321dc49d19dade8a6975d9c447329d0e99e26c151f86fbc4c5d39d0e6777aa22b82fad522d913d489f841af35c27daab6818276ba354210700ac8a4

    • SSDEEP

      1536:04d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:0IdseIO+EZEyFjEOFqTiQmGnOHjzU

    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks