General

  • Target

    d68634ecead016c1eeeb599250d2f9a49c196b108fa03c66eb0218e534774f5e

  • Size

    35KB

  • Sample

    240929-dvv92a1bka

  • MD5

    f2e916e3c61f717f26c79ba550802dff

  • SHA1

    4416127094bfb7b2cc1e2730b2173f2eb9f7bd72

  • SHA256

    d68634ecead016c1eeeb599250d2f9a49c196b108fa03c66eb0218e534774f5e

  • SHA512

    06245c46bed20a8685f478087ba7485a20bf9bbd6bedf72e441125826ef52587cdebad46ea13196ccfc6c2303a57e25accb73ac0eb2c9b5ae65a26c65e0533cd

  • SSDEEP

    768:B6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:M8Z0kA7FHlO2OwOTUtKjpB

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      d68634ecead016c1eeeb599250d2f9a49c196b108fa03c66eb0218e534774f5e

    • Size

      35KB

    • MD5

      f2e916e3c61f717f26c79ba550802dff

    • SHA1

      4416127094bfb7b2cc1e2730b2173f2eb9f7bd72

    • SHA256

      d68634ecead016c1eeeb599250d2f9a49c196b108fa03c66eb0218e534774f5e

    • SHA512

      06245c46bed20a8685f478087ba7485a20bf9bbd6bedf72e441125826ef52587cdebad46ea13196ccfc6c2303a57e25accb73ac0eb2c9b5ae65a26c65e0533cd

    • SSDEEP

      768:B6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:M8Z0kA7FHlO2OwOTUtKjpB

    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks