General

  • Target

    148d628a2787b67e88dfbcf1d8a3f750N.exe

  • Size

    71KB

  • Sample

    240817-mjanma1bmg

  • MD5

    148d628a2787b67e88dfbcf1d8a3f750

  • SHA1

    308115e37c7ffa1f156cdd9e5ade292182d3a58c

  • SHA256

    99d32a4585a929a8072a4b0677ad371414c5322cbdd4bb0162b986e61c935c87

  • SHA512

    4836e6f15212b3c1c53de3969da49138a47b2d54f9fc33c1105da077a65d646f6774ed140ec9fb7c7f8da9673e91dd9d77f17166b08bcd7d8aa227ac2746aafb

  • SSDEEP

    1536:wd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbH:wdseIOMEZEyFjEOFqTiQmQDHIbH

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      148d628a2787b67e88dfbcf1d8a3f750N.exe

    • Size

      71KB

    • MD5

      148d628a2787b67e88dfbcf1d8a3f750

    • SHA1

      308115e37c7ffa1f156cdd9e5ade292182d3a58c

    • SHA256

      99d32a4585a929a8072a4b0677ad371414c5322cbdd4bb0162b986e61c935c87

    • SHA512

      4836e6f15212b3c1c53de3969da49138a47b2d54f9fc33c1105da077a65d646f6774ed140ec9fb7c7f8da9673e91dd9d77f17166b08bcd7d8aa227ac2746aafb

    • SSDEEP

      1536:wd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbH:wdseIOMEZEyFjEOFqTiQmQDHIbH

    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks