General

  • Target

    a04f610843209d7fa14f996ec7bb8eac9217c8e2c37f594b192e69a93e1426f8N.exe

  • Size

    80KB

  • Sample

    240925-llgdhs1ejd

  • MD5

    c77e0cf5e41715c8650cbb8d06e53990

  • SHA1

    4e7ba72dfe19df224cf851dee970c322b0c7ecdb

  • SHA256

    a04f610843209d7fa14f996ec7bb8eac9217c8e2c37f594b192e69a93e1426f8

  • SHA512

    57a085dca23dbb09bb744b302ae6f02f0653479d0ef6762af318ad8e4504dc384fd84d32712a105866da5893a52b8e5a885ac28e7904f8130583a9103d5d14e0

  • SSDEEP

    768:rfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:rfbIvYvZEyFKF6N4yS+AQmZTl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      a04f610843209d7fa14f996ec7bb8eac9217c8e2c37f594b192e69a93e1426f8N.exe

    • Size

      80KB

    • MD5

      c77e0cf5e41715c8650cbb8d06e53990

    • SHA1

      4e7ba72dfe19df224cf851dee970c322b0c7ecdb

    • SHA256

      a04f610843209d7fa14f996ec7bb8eac9217c8e2c37f594b192e69a93e1426f8

    • SHA512

      57a085dca23dbb09bb744b302ae6f02f0653479d0ef6762af318ad8e4504dc384fd84d32712a105866da5893a52b8e5a885ac28e7904f8130583a9103d5d14e0

    • SSDEEP

      768:rfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:rfbIvYvZEyFKF6N4yS+AQmZTl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks