General

  • Target

    90284c2b0acf6d6755deeb26c5ebb560N.exe

  • Size

    248KB

  • Sample

    240823-m63b6asgpr

  • MD5

    90284c2b0acf6d6755deeb26c5ebb560

  • SHA1

    f95ca76dd41f850d1b335f508be4aef62c42869c

  • SHA256

    f38e5cb8690e1d12d5810f0e052f4f00d22c3c60cbedf52baa0efb2f479147f4

  • SHA512

    c6160713a86b85e80a27496f8836adbdad92483b6983c3f38ba8862f9d3f81f21904b28612dd5e27be8d7534cc358f633f0fa555a2b97beab0ea6af105a72dbd

  • SSDEEP

    1536:y4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:yIdseIO+EZEyFjEOFqTiQmGnOHjzU

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      90284c2b0acf6d6755deeb26c5ebb560N.exe

    • Size

      248KB

    • MD5

      90284c2b0acf6d6755deeb26c5ebb560

    • SHA1

      f95ca76dd41f850d1b335f508be4aef62c42869c

    • SHA256

      f38e5cb8690e1d12d5810f0e052f4f00d22c3c60cbedf52baa0efb2f479147f4

    • SHA512

      c6160713a86b85e80a27496f8836adbdad92483b6983c3f38ba8862f9d3f81f21904b28612dd5e27be8d7534cc358f633f0fa555a2b97beab0ea6af105a72dbd

    • SSDEEP

      1536:y4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:yIdseIO+EZEyFjEOFqTiQmGnOHjzU

    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks