General

  • Target

    8af889a36b8cb2843d3d694c2eb8dbc01b46c4d9c762b03b892af75cd358520d.exe

  • Size

    76KB

  • Sample

    241120-eqrlqazqgs

  • MD5

    d87fe9002df21cbc668639c043c22a79

  • SHA1

    48681954230dad6bd85cc485cea7f0381668cffa

  • SHA256

    8af889a36b8cb2843d3d694c2eb8dbc01b46c4d9c762b03b892af75cd358520d

  • SHA512

    6d5cd64e8570090f22cbbb47fd9a386ba86456cf6c29ecd40c37e450cf7c037e75e6388a107bf1fb0fa8033c38534b997ad1022d0caf2a5a3c426d9b45b68474

  • SSDEEP

    1536:dd9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w11L:VdseIOMEZEyFjEOFqaiQm5l/5w11L

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      8af889a36b8cb2843d3d694c2eb8dbc01b46c4d9c762b03b892af75cd358520d.exe

    • Size

      76KB

    • MD5

      d87fe9002df21cbc668639c043c22a79

    • SHA1

      48681954230dad6bd85cc485cea7f0381668cffa

    • SHA256

      8af889a36b8cb2843d3d694c2eb8dbc01b46c4d9c762b03b892af75cd358520d

    • SHA512

      6d5cd64e8570090f22cbbb47fd9a386ba86456cf6c29ecd40c37e450cf7c037e75e6388a107bf1fb0fa8033c38534b997ad1022d0caf2a5a3c426d9b45b68474

    • SSDEEP

      1536:dd9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w11L:VdseIOMEZEyFjEOFqaiQm5l/5w11L

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks