General

  • Target

    1ae422c42d28b5b470d437db502b79fff26db3fc796038f977d64e166279def3N.exe

  • Size

    92KB

  • Sample

    241119-gfns7a1bla

  • MD5

    f51e4622f42425e5e43cacdc7824a0d0

  • SHA1

    f8bc6469df1716361173bd4281713e0181e8bf57

  • SHA256

    1ae422c42d28b5b470d437db502b79fff26db3fc796038f977d64e166279def3

  • SHA512

    8daf68dda8b1e843b8ab20aaa6f9936635b7a25709ee61f0e0f6c3c1968126368c3c3313e9d4fba6532da2c68126a423f81c74203e9be99f2a85fc495693766b

  • SSDEEP

    1536:Yd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5:odseIOyEZEyFjEOFqTiQm5l/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      1ae422c42d28b5b470d437db502b79fff26db3fc796038f977d64e166279def3N.exe

    • Size

      92KB

    • MD5

      f51e4622f42425e5e43cacdc7824a0d0

    • SHA1

      f8bc6469df1716361173bd4281713e0181e8bf57

    • SHA256

      1ae422c42d28b5b470d437db502b79fff26db3fc796038f977d64e166279def3

    • SHA512

      8daf68dda8b1e843b8ab20aaa6f9936635b7a25709ee61f0e0f6c3c1968126368c3c3313e9d4fba6532da2c68126a423f81c74203e9be99f2a85fc495693766b

    • SSDEEP

      1536:Yd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5:odseIOyEZEyFjEOFqTiQm5l/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks