General

  • Target

    f36885d9310e513fcdfccedbe9f9d6a58af785604d5a3dda437d9d15f704847f.exe

  • Size

    92KB

  • Sample

    241119-pq5hpawhlm

  • MD5

    da37ab0901d58393f58440b8fd04e921

  • SHA1

    46a9d071e6560b02abf7b23c4526cb04062bfdcf

  • SHA256

    f36885d9310e513fcdfccedbe9f9d6a58af785604d5a3dda437d9d15f704847f

  • SHA512

    3120842780a03c756b8a07ab04411916cf926249028954eae7713b38043e4af09cadd3dc493a41c084421f5a8bd869d8b3885a203353fcb9d6f9e3b08e507d96

  • SSDEEP

    1536:Yd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5f:odseIOyEZEyFjEOFqTiQm5l/5f

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      f36885d9310e513fcdfccedbe9f9d6a58af785604d5a3dda437d9d15f704847f.exe

    • Size

      92KB

    • MD5

      da37ab0901d58393f58440b8fd04e921

    • SHA1

      46a9d071e6560b02abf7b23c4526cb04062bfdcf

    • SHA256

      f36885d9310e513fcdfccedbe9f9d6a58af785604d5a3dda437d9d15f704847f

    • SHA512

      3120842780a03c756b8a07ab04411916cf926249028954eae7713b38043e4af09cadd3dc493a41c084421f5a8bd869d8b3885a203353fcb9d6f9e3b08e507d96

    • SSDEEP

      1536:Yd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5f:odseIOyEZEyFjEOFqTiQm5l/5f

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks