General

  • Target

    5a65235160605cdca49f3f33060b2a9b16d4f28ea7e60c3f4e98210c09f3b020.exe

  • Size

    248KB

  • Sample

    250101-wwbacszjbp

  • MD5

    0a06e1be816ad0829750b2f214ac660a

  • SHA1

    445ebc855644ad2d53647a7a3d46d54108d7238a

  • SHA256

    5a65235160605cdca49f3f33060b2a9b16d4f28ea7e60c3f4e98210c09f3b020

  • SHA512

    a3e540d17981efefb7ff2d9d4f96d9ec3b384636b478fe36aaad8cea63c413ff88cfecc5f85a102a0288df563c233b0dba46dfdec2d5d260a6165fdf85a0bc1e

  • SSDEEP

    1536:H4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzUb:HIdseIO+EZEyFjEOFqTiQmGnOHjzUb

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      5a65235160605cdca49f3f33060b2a9b16d4f28ea7e60c3f4e98210c09f3b020.exe

    • Size

      248KB

    • MD5

      0a06e1be816ad0829750b2f214ac660a

    • SHA1

      445ebc855644ad2d53647a7a3d46d54108d7238a

    • SHA256

      5a65235160605cdca49f3f33060b2a9b16d4f28ea7e60c3f4e98210c09f3b020

    • SHA512

      a3e540d17981efefb7ff2d9d4f96d9ec3b384636b478fe36aaad8cea63c413ff88cfecc5f85a102a0288df563c233b0dba46dfdec2d5d260a6165fdf85a0bc1e

    • SSDEEP

      1536:H4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzUb:HIdseIO+EZEyFjEOFqTiQmGnOHjzUb

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks