General

  • Target

    3b4a1f0ea83dc807c446b916779759a7473ccaac9d0d56d1634434afc69534ceN.exe

  • Size

    316KB

  • Sample

    250124-wpjcds1jdt

  • MD5

    2d126c47ea36142a1c398b82af8630f0

  • SHA1

    6c780c0144b3596c0c416b7d6a5e7c7202b93c2d

  • SHA256

    3b4a1f0ea83dc807c446b916779759a7473ccaac9d0d56d1634434afc69534ce

  • SHA512

    cce97d7cf76c137111d996bac664ef2c0e6a63a27b0bb1831888497ddb80f509fa13d94dc0133f89f39e50a6c3b932be3d22dda2716c5eb593feff4e324232a2

  • SSDEEP

    1536:G4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:GIdseIO+EZEyFjEOFqTiQmKnOHjzU

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      3b4a1f0ea83dc807c446b916779759a7473ccaac9d0d56d1634434afc69534ceN.exe

    • Size

      316KB

    • MD5

      2d126c47ea36142a1c398b82af8630f0

    • SHA1

      6c780c0144b3596c0c416b7d6a5e7c7202b93c2d

    • SHA256

      3b4a1f0ea83dc807c446b916779759a7473ccaac9d0d56d1634434afc69534ce

    • SHA512

      cce97d7cf76c137111d996bac664ef2c0e6a63a27b0bb1831888497ddb80f509fa13d94dc0133f89f39e50a6c3b932be3d22dda2716c5eb593feff4e324232a2

    • SSDEEP

      1536:G4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:GIdseIO+EZEyFjEOFqTiQmKnOHjzU

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks