General

  • Target

    b70170976ad6b720a625f3848c310c7b8b3149b5b50a230bad88c18f324ea193.exe

  • Size

    61KB

  • Sample

    241119-xfajka1bmm

  • MD5

    91414c25f74b6ac3dfb1e3f36f94b640

  • SHA1

    f206b328bc8ec8f65cb241253c358f4287f96aaa

  • SHA256

    b70170976ad6b720a625f3848c310c7b8b3149b5b50a230bad88c18f324ea193

  • SHA512

    fd92841e8bdb2576adcb7a3029a3e33d20d7075a99863e179452c62ef0a2f77736a1f02779358521db0a92ccc12ce5234f6ef4592d00c43bee88c3db42828fa6

  • SSDEEP

    1536:td9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ4l/5P:FdseIOMEZEyFjEOFqTiQmil/5P

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      b70170976ad6b720a625f3848c310c7b8b3149b5b50a230bad88c18f324ea193.exe

    • Size

      61KB

    • MD5

      91414c25f74b6ac3dfb1e3f36f94b640

    • SHA1

      f206b328bc8ec8f65cb241253c358f4287f96aaa

    • SHA256

      b70170976ad6b720a625f3848c310c7b8b3149b5b50a230bad88c18f324ea193

    • SHA512

      fd92841e8bdb2576adcb7a3029a3e33d20d7075a99863e179452c62ef0a2f77736a1f02779358521db0a92ccc12ce5234f6ef4592d00c43bee88c3db42828fa6

    • SSDEEP

      1536:td9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ4l/5P:FdseIOMEZEyFjEOFqTiQmil/5P

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks