General

  • Target

    c93d0186b392999477f491b21279f48d1895927f014bc6390440e6faebe4d041N

  • Size

    248KB

  • Sample

    240919-e9gkvs1end

  • MD5

    a60ebfe7854009ab2b5ec3af14e51300

  • SHA1

    caa1cdc7908a51a7069aeb8aa37076ec7060a95d

  • SHA256

    c93d0186b392999477f491b21279f48d1895927f014bc6390440e6faebe4d041

  • SHA512

    28f91aa3eb563396aaa6eab950c89172fd9a7900ec3eb7c3e0d09780b74c28782968b1304e5afc342d926733c7d47df0ba411c4c83d2414fc173c42799b2e981

  • SSDEEP

    1536:n4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:nIdseIO+EZEyFjEOFqTiQmGnOHjzU

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      c93d0186b392999477f491b21279f48d1895927f014bc6390440e6faebe4d041N

    • Size

      248KB

    • MD5

      a60ebfe7854009ab2b5ec3af14e51300

    • SHA1

      caa1cdc7908a51a7069aeb8aa37076ec7060a95d

    • SHA256

      c93d0186b392999477f491b21279f48d1895927f014bc6390440e6faebe4d041

    • SHA512

      28f91aa3eb563396aaa6eab950c89172fd9a7900ec3eb7c3e0d09780b74c28782968b1304e5afc342d926733c7d47df0ba411c4c83d2414fc173c42799b2e981

    • SSDEEP

      1536:n4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:nIdseIO+EZEyFjEOFqTiQmGnOHjzU

    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks