General

  • Target
    2026-11-09_03829c8d1baae9e324a5d666c1db8dc5_elex_glassworm_icedid_njrat_rhadamanthys_stop
  • Size 1.1MB
  • Sample261111-fbse5sed66
  • SHA256 1b7f3f694df3639f0863b1aa33412739a3f4de9dbdf2fea2736a9ff84b7b50fb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • neconyd

C2
  • http://ow5dirasuek.com/

  • http://mkkuei4kdsz.com/

  • http://lousta.net/

Targets

    • Target
      2026-11-09_03829c8d1baae9e324a5d666c1db8dc5_elex_glassworm_icedid_njrat_rhadamanthys_stop
    • Size 1.1MB
    • SHA256 1b7f3f694df3639f0863b1aa33412739a3f4de9dbdf2fea2736a9ff84b7b50fb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Neconyd

      Neconyd is a trojan written in C++.

    • Custom signature

      UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks