General

  • Target

    f1daacbe962fb12dc51a1f0466fa5670N.exe

  • Size

    80KB

  • Sample

    240814-b2xekatgrf

  • MD5

    f1daacbe962fb12dc51a1f0466fa5670

  • SHA1

    1985ebec38c09d9fea35ab15067ecb99e98d3b7b

  • SHA256

    910ae32542a2d2f9a5f0c8574b94358fe21b7a210af9feb7e8c327bcd7b58345

  • SHA512

    68899c73badd5b99fdb501901ac170f17980975881b52d00f194280f93fe0fd6d57b7a855464eccd1616738972e7a3ba2028a41999633c88ee1e7189b5b51e27

  • SSDEEP

    768:IfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:IfbIvYvZEyFKF6N4yS+AQmZTl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      f1daacbe962fb12dc51a1f0466fa5670N.exe

    • Size

      80KB

    • MD5

      f1daacbe962fb12dc51a1f0466fa5670

    • SHA1

      1985ebec38c09d9fea35ab15067ecb99e98d3b7b

    • SHA256

      910ae32542a2d2f9a5f0c8574b94358fe21b7a210af9feb7e8c327bcd7b58345

    • SHA512

      68899c73badd5b99fdb501901ac170f17980975881b52d00f194280f93fe0fd6d57b7a855464eccd1616738972e7a3ba2028a41999633c88ee1e7189b5b51e27

    • SSDEEP

      768:IfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:IfbIvYvZEyFKF6N4yS+AQmZTl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks