General

  • Target
    53e08c7cb106029c099eda0e509a35b0N.exe
  • Size 248KB
  • Sample240823-pcrpnsshld
  • SHA256 9e2eea4f447a5e9b91c3240fed3f20064e63b164d16018de885d06c13917371a
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • neconyd

C2
  • http://ow5dirasuek.com/

  • http://mkkuei4kdsz.com/

  • http://lousta.net/

Targets

    • Target
      53e08c7cb106029c099eda0e509a35b0N.exe
    • Size 248KB
    • SHA256 9e2eea4f447a5e9b91c3240fed3f20064e63b164d16018de885d06c13917371a
    • MD5 SHA1 SHA512 SSDEEP
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks