General

  • Target

    3963d407a567b49dd63e3af8d659d610N.exe

  • Size

    92KB

  • Sample

    240825-e76f7svdnf

  • MD5

    3963d407a567b49dd63e3af8d659d610

  • SHA1

    7dc611cb1055dd12591a257f537d05f17dcfaf39

  • SHA256

    d7008019cff14b3799530e6daeaf877574231755b4c3255426c1acead1f2cb12

  • SHA512

    9e7e6b599e866ebc8b0db66c7d90cc110d97901d181c5a0295670ea4bae1e8919a4c058400e655474765ad927a34ebd7574471ca2a8aece33f9f1e0221e9586a

  • SSDEEP

    1536:gd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5:AdseIOyEZEyFjEOFqTiQm5l/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      3963d407a567b49dd63e3af8d659d610N.exe

    • Size

      92KB

    • MD5

      3963d407a567b49dd63e3af8d659d610

    • SHA1

      7dc611cb1055dd12591a257f537d05f17dcfaf39

    • SHA256

      d7008019cff14b3799530e6daeaf877574231755b4c3255426c1acead1f2cb12

    • SHA512

      9e7e6b599e866ebc8b0db66c7d90cc110d97901d181c5a0295670ea4bae1e8919a4c058400e655474765ad927a34ebd7574471ca2a8aece33f9f1e0221e9586a

    • SSDEEP

      1536:gd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5:AdseIOyEZEyFjEOFqTiQm5l/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks