General

  • Target

    d88e1bf5de74332276c7966852d4c222ce5d474f02332d6ae7970a43370bf8b1.exe

  • Size

    90KB

  • Sample

    241123-hgf1eazqfx

  • MD5

    0f3cd533673e8e4692de0ab90df485bd

  • SHA1

    741fd7cc6ffcb36d550849b14cc616a55217a8bf

  • SHA256

    d88e1bf5de74332276c7966852d4c222ce5d474f02332d6ae7970a43370bf8b1

  • SHA512

    6d85fcdbce989ed1451d3aa7b35d7847d51ee4670bd11219a9943a62e3be393524cccb6f880a3b1f97281958449205b493dda290ccb9a52f76f63d99505ec52b

  • SSDEEP

    768:gMEIvFGvZEr8LFK0ic46N4zeSdPAHwmZGp6JXXlaa5uAe:gbIvYvZEyFKF6N4aS5AQmZTl/52

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      d88e1bf5de74332276c7966852d4c222ce5d474f02332d6ae7970a43370bf8b1.exe

    • Size

      90KB

    • MD5

      0f3cd533673e8e4692de0ab90df485bd

    • SHA1

      741fd7cc6ffcb36d550849b14cc616a55217a8bf

    • SHA256

      d88e1bf5de74332276c7966852d4c222ce5d474f02332d6ae7970a43370bf8b1

    • SHA512

      6d85fcdbce989ed1451d3aa7b35d7847d51ee4670bd11219a9943a62e3be393524cccb6f880a3b1f97281958449205b493dda290ccb9a52f76f63d99505ec52b

    • SSDEEP

      768:gMEIvFGvZEr8LFK0ic46N4zeSdPAHwmZGp6JXXlaa5uAe:gbIvYvZEyFKF6N4aS5AQmZTl/52

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks