General

  • Target

    0ff077e73ac896074b6a5e0fbb936740N.exe

  • Size

    90KB

  • Sample

    240818-ct65gatark

  • MD5

    0ff077e73ac896074b6a5e0fbb936740

  • SHA1

    a5018432960f6f4f0779ea2c97cd5c436235b07a

  • SHA256

    40e334861a43d950c9e37b2b1707f8c7ed2c5da8b4d8dfb6d2a83aa89fcd2733

  • SHA512

    485e1e0b06ba70ecda50b4153562a3fb4ca919c39d1faba6ac8360fdfa3fe2c213dfd6cc480e7404b9022f1e7dc9720394a117d57cd183e0946e6719381c9727

  • SSDEEP

    768:3MEIvFGvZEr8LFK0ic46N4zeSdPAHwmZGp6JXXlaa5uA:3bIvYvZEyFKF6N4aS5AQmZTl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      0ff077e73ac896074b6a5e0fbb936740N.exe

    • Size

      90KB

    • MD5

      0ff077e73ac896074b6a5e0fbb936740

    • SHA1

      a5018432960f6f4f0779ea2c97cd5c436235b07a

    • SHA256

      40e334861a43d950c9e37b2b1707f8c7ed2c5da8b4d8dfb6d2a83aa89fcd2733

    • SHA512

      485e1e0b06ba70ecda50b4153562a3fb4ca919c39d1faba6ac8360fdfa3fe2c213dfd6cc480e7404b9022f1e7dc9720394a117d57cd183e0946e6719381c9727

    • SSDEEP

      768:3MEIvFGvZEr8LFK0ic46N4zeSdPAHwmZGp6JXXlaa5uA:3bIvYvZEyFKF6N4aS5AQmZTl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks