General

  • Target

    a14fc5f51dfd885acec1791a743f0a3ef9976d136a454b5729da5ed6e58afb6f

  • Size

    316KB

  • Sample

    241009-b44xeszejl

  • MD5

    8caae0fb9ee969631fff226e79eff9b3

  • SHA1

    be20b9d7d09e1ebf789b5eabe835840d109117a3

  • SHA256

    a14fc5f51dfd885acec1791a743f0a3ef9976d136a454b5729da5ed6e58afb6f

  • SHA512

    0a452706932fac6c7baf64e854953939a01b6d4afe14811d8ff3068a485315e9ef5c1440f9e944ca93a5eeade6e4d0fc7185a27804a7acb75edb542cc64bc2ab

  • SSDEEP

    1536:v4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:vIdseIO+EZEyFjEOFqTiQmKnOHjzU

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      a14fc5f51dfd885acec1791a743f0a3ef9976d136a454b5729da5ed6e58afb6f

    • Size

      316KB

    • MD5

      8caae0fb9ee969631fff226e79eff9b3

    • SHA1

      be20b9d7d09e1ebf789b5eabe835840d109117a3

    • SHA256

      a14fc5f51dfd885acec1791a743f0a3ef9976d136a454b5729da5ed6e58afb6f

    • SHA512

      0a452706932fac6c7baf64e854953939a01b6d4afe14811d8ff3068a485315e9ef5c1440f9e944ca93a5eeade6e4d0fc7185a27804a7acb75edb542cc64bc2ab

    • SSDEEP

      1536:v4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:vIdseIO+EZEyFjEOFqTiQmKnOHjzU

    • Neconyd

      Neconyd is a trojan written in C++.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks