General

  • Target

    7c670f9680931eb007751eba725afab5c0a7c9a770fdb668c81af27aee9ffafbN

  • Size

    248KB

  • Sample

    240919-ew5qja1alg

  • MD5

    0c41d295e64a4a8b90927c2c3ee0d390

  • SHA1

    8df0499bb0f57fe12af9d00487ba479192b7f777

  • SHA256

    7c670f9680931eb007751eba725afab5c0a7c9a770fdb668c81af27aee9ffafb

  • SHA512

    980c0e0d044d575a8c5bbf226621fa7478246d242459c79acb9de13f3f41a0ac5e56ee7f43f9d00400f92802e4b8e7bedd7c4315b9a79e22f464d49c55f927b4

  • SSDEEP

    1536:D4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:DIdseIO+EZEyFjEOFqTiQmGnOHjzU

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      7c670f9680931eb007751eba725afab5c0a7c9a770fdb668c81af27aee9ffafbN

    • Size

      248KB

    • MD5

      0c41d295e64a4a8b90927c2c3ee0d390

    • SHA1

      8df0499bb0f57fe12af9d00487ba479192b7f777

    • SHA256

      7c670f9680931eb007751eba725afab5c0a7c9a770fdb668c81af27aee9ffafb

    • SHA512

      980c0e0d044d575a8c5bbf226621fa7478246d242459c79acb9de13f3f41a0ac5e56ee7f43f9d00400f92802e4b8e7bedd7c4315b9a79e22f464d49c55f927b4

    • SSDEEP

      1536:D4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:DIdseIO+EZEyFjEOFqTiQmGnOHjzU

    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks