General

  • Target

    34fce2719fc153d1a1358a6af870787c3261730a4c3f3b098eab70d6418dda1f.exe

  • Size

    68KB

  • Sample

    241123-p58tna1pel

  • MD5

    5b93ed1c83192a9c9a3b8400c6320e7d

  • SHA1

    2edde326e9b9b5d27f68fa2e6e45f868aa4ece55

  • SHA256

    34fce2719fc153d1a1358a6af870787c3261730a4c3f3b098eab70d6418dda1f

  • SHA512

    72e761161b410a46db0879afc16b67fe21d9bf4da862db56011949c52c0314058de3de463bc0688e5a96f62aab1821896c02ebe15ecf4bdf01c7e62062081cca

  • SSDEEP

    1536:7d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5v:LdseIOMEZEyFjEOFqTiQm5l/5v

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      34fce2719fc153d1a1358a6af870787c3261730a4c3f3b098eab70d6418dda1f.exe

    • Size

      68KB

    • MD5

      5b93ed1c83192a9c9a3b8400c6320e7d

    • SHA1

      2edde326e9b9b5d27f68fa2e6e45f868aa4ece55

    • SHA256

      34fce2719fc153d1a1358a6af870787c3261730a4c3f3b098eab70d6418dda1f

    • SHA512

      72e761161b410a46db0879afc16b67fe21d9bf4da862db56011949c52c0314058de3de463bc0688e5a96f62aab1821896c02ebe15ecf4bdf01c7e62062081cca

    • SSDEEP

      1536:7d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5v:LdseIOMEZEyFjEOFqTiQm5l/5v

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks