General

  • Target

    473a32f996d6419bcfcd658482e8b8ed3473bed66450eb26c091a8b4eafccc65

  • Size

    248KB

  • Sample

    241102-gzz1kazgrl

  • MD5

    564dc0e6790a358cb44dd72d9fc9951c

  • SHA1

    7ca1fb2b38b367cff092410a247b399525db81c0

  • SHA256

    473a32f996d6419bcfcd658482e8b8ed3473bed66450eb26c091a8b4eafccc65

  • SHA512

    58454893d43e47222e5a4cd950da705fdd70ef67ed3d3552de6b3b899d6361ab7e78728e0ff821faa876d65acac63d00ded6b1032693332e792118d0fdb0ca09

  • SSDEEP

    1536:H4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:HIdseIO+EZEyFjEOFqTiQmGnOHjzU

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      473a32f996d6419bcfcd658482e8b8ed3473bed66450eb26c091a8b4eafccc65

    • Size

      248KB

    • MD5

      564dc0e6790a358cb44dd72d9fc9951c

    • SHA1

      7ca1fb2b38b367cff092410a247b399525db81c0

    • SHA256

      473a32f996d6419bcfcd658482e8b8ed3473bed66450eb26c091a8b4eafccc65

    • SHA512

      58454893d43e47222e5a4cd950da705fdd70ef67ed3d3552de6b3b899d6361ab7e78728e0ff821faa876d65acac63d00ded6b1032693332e792118d0fdb0ca09

    • SSDEEP

      1536:H4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:HIdseIO+EZEyFjEOFqTiQmGnOHjzU

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks