General

  • Target

    9c7edff2ba87bc185d8586c678c3df3064eb5f58284aac247bace6cac204f730N

  • Size

    248KB

  • Sample

    240927-qrlyeavbqk

  • MD5

    f1ccce6d520cfb9970acc527ef98af70

  • SHA1

    ecb2baf03c34e6fd5e25d0680b9755535cc58412

  • SHA256

    9c7edff2ba87bc185d8586c678c3df3064eb5f58284aac247bace6cac204f730

  • SHA512

    69a455e93e41a18acef523dfdc3989e3b865f20cca3ca8e16c394372907e01d78ffee7a5e8ed5baa63f49561238b2d3fb0d8798fc976bc5629de06e6f95081ab

  • SSDEEP

    1536:n4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:nIdseIO+EZEyFjEOFqTiQmGnOHjzU

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      9c7edff2ba87bc185d8586c678c3df3064eb5f58284aac247bace6cac204f730N

    • Size

      248KB

    • MD5

      f1ccce6d520cfb9970acc527ef98af70

    • SHA1

      ecb2baf03c34e6fd5e25d0680b9755535cc58412

    • SHA256

      9c7edff2ba87bc185d8586c678c3df3064eb5f58284aac247bace6cac204f730

    • SHA512

      69a455e93e41a18acef523dfdc3989e3b865f20cca3ca8e16c394372907e01d78ffee7a5e8ed5baa63f49561238b2d3fb0d8798fc976bc5629de06e6f95081ab

    • SSDEEP

      1536:n4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:nIdseIO+EZEyFjEOFqTiQmGnOHjzU

    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks