General

  • Target

    2af4a3013dc8e3847bab66ddf8027d30N.exe

  • Size

    316KB

  • Sample

    240905-pfk2as1eqh

  • MD5

    2af4a3013dc8e3847bab66ddf8027d30

  • SHA1

    b4c5bef456672d7791919066b19af5ae59b684ef

  • SHA256

    62cb5172156ebb279b2f49e655dfaf9233a7ae2ad59f5e95f6b53e294e08e4e0

  • SHA512

    643dfaf5229b3323f8098b9f0c19c00c0f38fa3d7a83b0155718917e4d414489082e0f7d8856c5a4ce5133c1c9eb1f95bc726cecea5946c58550785a8ab0500e

  • SSDEEP

    1536:p4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:pIdseIO+EZEyFjEOFqTiQmKnOHjzU

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      2af4a3013dc8e3847bab66ddf8027d30N.exe

    • Size

      316KB

    • MD5

      2af4a3013dc8e3847bab66ddf8027d30

    • SHA1

      b4c5bef456672d7791919066b19af5ae59b684ef

    • SHA256

      62cb5172156ebb279b2f49e655dfaf9233a7ae2ad59f5e95f6b53e294e08e4e0

    • SHA512

      643dfaf5229b3323f8098b9f0c19c00c0f38fa3d7a83b0155718917e4d414489082e0f7d8856c5a4ce5133c1c9eb1f95bc726cecea5946c58550785a8ab0500e

    • SSDEEP

      1536:p4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:pIdseIO+EZEyFjEOFqTiQmKnOHjzU

    • Neconyd

      Neconyd is a trojan written in C++.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks