General

  • Target

    30219542000d88d27b93554c11a01fdd7a2ade148a916f32813500d31df3f0b1.exe

  • Size

    80KB

  • Sample

    241120-dtwjeazjet

  • MD5

    7029ae0bc40f5db9c20b8253ac405240

  • SHA1

    2d399015472e8ad47044781c979edaef599e5047

  • SHA256

    30219542000d88d27b93554c11a01fdd7a2ade148a916f32813500d31df3f0b1

  • SHA512

    4c7f97e3c32dd1323e8adcc12b521b9c489003324cea7577b52ff771a793cf1fd8fc0e86707e18199b55c67dc32951d24b36323564576178242fbf012954eef8

  • SSDEEP

    1536:Cd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzT:ydseIOMEZEyFjEOFqTiQmOl/5xPvwX

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      30219542000d88d27b93554c11a01fdd7a2ade148a916f32813500d31df3f0b1.exe

    • Size

      80KB

    • MD5

      7029ae0bc40f5db9c20b8253ac405240

    • SHA1

      2d399015472e8ad47044781c979edaef599e5047

    • SHA256

      30219542000d88d27b93554c11a01fdd7a2ade148a916f32813500d31df3f0b1

    • SHA512

      4c7f97e3c32dd1323e8adcc12b521b9c489003324cea7577b52ff771a793cf1fd8fc0e86707e18199b55c67dc32951d24b36323564576178242fbf012954eef8

    • SSDEEP

      1536:Cd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzT:ydseIOMEZEyFjEOFqTiQmOl/5xPvwX

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks