General

  • Target

    3b6e1826945d7a6cb858252f82427960N.exe

  • Size

    316KB

  • Sample

    240902-2yrb9a1bqf

  • MD5

    3b6e1826945d7a6cb858252f82427960

  • SHA1

    28114c3ffab52962ff018674ab7dc0fd55a09cb4

  • SHA256

    692ee5ca268a79f28b5106f71eda80df614052b63444885c9174d39e1bb82c04

  • SHA512

    7e8ea0eee5e779196de5d5cec2c202702e833881a302b333e56bf7f4f4701bc56b51371f870061e1a0ae39f8affc9885ddb58d3d0ef3fce88aebaa7d0f9e63a3

  • SSDEEP

    1536:R4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:RIdseIO+EZEyFjEOFqTiQmKnOHjzU

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      3b6e1826945d7a6cb858252f82427960N.exe

    • Size

      316KB

    • MD5

      3b6e1826945d7a6cb858252f82427960

    • SHA1

      28114c3ffab52962ff018674ab7dc0fd55a09cb4

    • SHA256

      692ee5ca268a79f28b5106f71eda80df614052b63444885c9174d39e1bb82c04

    • SHA512

      7e8ea0eee5e779196de5d5cec2c202702e833881a302b333e56bf7f4f4701bc56b51371f870061e1a0ae39f8affc9885ddb58d3d0ef3fce88aebaa7d0f9e63a3

    • SSDEEP

      1536:R4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:RIdseIO+EZEyFjEOFqTiQmKnOHjzU

    • Neconyd

      Neconyd is a trojan written in C++.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks