General

  • Target

    d0a55bf7204241d83f0ec60efc97fca35a731dcc9b585f06aa72294e0bcb758a

  • Size

    316KB

  • Sample

    241205-de8kes1mam

  • MD5

    136b3b630f69c628c981c1633189fe31

  • SHA1

    27b1f849ff70e6a396c2cc7c4a28ac03a8c517fb

  • SHA256

    d0a55bf7204241d83f0ec60efc97fca35a731dcc9b585f06aa72294e0bcb758a

  • SHA512

    4d1b4d3f0d0e11698d529ce0a97532cc8065572f76b9d952b875f3749af1bd87868f3323e9e7aa55b882594fb54458e0c4d5de7dc56c7e0cb824df278d7bd48a

  • SSDEEP

    1536:O4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:OIdseIO+EZEyFjEOFqTiQmKnOHjzU

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      d0a55bf7204241d83f0ec60efc97fca35a731dcc9b585f06aa72294e0bcb758a

    • Size

      316KB

    • MD5

      136b3b630f69c628c981c1633189fe31

    • SHA1

      27b1f849ff70e6a396c2cc7c4a28ac03a8c517fb

    • SHA256

      d0a55bf7204241d83f0ec60efc97fca35a731dcc9b585f06aa72294e0bcb758a

    • SHA512

      4d1b4d3f0d0e11698d529ce0a97532cc8065572f76b9d952b875f3749af1bd87868f3323e9e7aa55b882594fb54458e0c4d5de7dc56c7e0cb824df278d7bd48a

    • SSDEEP

      1536:O4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:OIdseIO+EZEyFjEOFqTiQmKnOHjzU

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks