General

  • Target

    72c041ea18a93dfe31baba219ce992e8dfd600dd04984c78bdf0e99341ba2233N

  • Size

    248KB

  • Sample

    241014-x475qswcjk

  • MD5

    cb9a9db3e21843a9a051a52d2b53a290

  • SHA1

    09eb7fb0f9991cd659bd3bb4d30593c16cc5aa2a

  • SHA256

    72c041ea18a93dfe31baba219ce992e8dfd600dd04984c78bdf0e99341ba2233

  • SHA512

    b965d755ec7fa481b707fca08a56e4664a51434b7fdead42e6e465a03191bd59d5cae9005b2698bfbef4ed659d57f046f6c4fc07b79c5ca5d969b4d60e39f427

  • SSDEEP

    1536:N4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:NIdseIO+EZEyFjEOFqTiQmGnOHjzU

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      72c041ea18a93dfe31baba219ce992e8dfd600dd04984c78bdf0e99341ba2233N

    • Size

      248KB

    • MD5

      cb9a9db3e21843a9a051a52d2b53a290

    • SHA1

      09eb7fb0f9991cd659bd3bb4d30593c16cc5aa2a

    • SHA256

      72c041ea18a93dfe31baba219ce992e8dfd600dd04984c78bdf0e99341ba2233

    • SHA512

      b965d755ec7fa481b707fca08a56e4664a51434b7fdead42e6e465a03191bd59d5cae9005b2698bfbef4ed659d57f046f6c4fc07b79c5ca5d969b4d60e39f427

    • SSDEEP

      1536:N4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:NIdseIO+EZEyFjEOFqTiQmGnOHjzU

    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks