General

  • Target

    bcfe46db3d0db34dad4bf619018b069893491567152b4fa3b6541f9f05c9c3dcN.exe

  • Size

    88KB

  • Sample

    241122-rnz7asyjgr

  • MD5

    1f123d1bb837605fc66f5c41e513fef0

  • SHA1

    3d745d2e5ac0949e3b14bc9106149e65715ea3f6

  • SHA256

    bcfe46db3d0db34dad4bf619018b069893491567152b4fa3b6541f9f05c9c3dc

  • SHA512

    a65677d262465aca8c23cc240f0505e3ae11237d4729562e275487a3cfa71a4da6e0efc82c5739e44e4e4e3b3a32b3543321cb45959ed898ae148d8f49678b83

  • SSDEEP

    768:ZMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:ZbIvYvZEyFKF6N4yS+AQmZTl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      bcfe46db3d0db34dad4bf619018b069893491567152b4fa3b6541f9f05c9c3dcN.exe

    • Size

      88KB

    • MD5

      1f123d1bb837605fc66f5c41e513fef0

    • SHA1

      3d745d2e5ac0949e3b14bc9106149e65715ea3f6

    • SHA256

      bcfe46db3d0db34dad4bf619018b069893491567152b4fa3b6541f9f05c9c3dc

    • SHA512

      a65677d262465aca8c23cc240f0505e3ae11237d4729562e275487a3cfa71a4da6e0efc82c5739e44e4e4e3b3a32b3543321cb45959ed898ae148d8f49678b83

    • SSDEEP

      768:ZMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:ZbIvYvZEyFKF6N4yS+AQmZTl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks