General

  • Target

    992565db16ea10b24896a693d4259db3ae08a93978c7d71876d85f414d8798f0.exe

  • Size

    92KB

  • Sample

    241125-gp7bwssmby

  • MD5

    78e7041bd176cf644b9bb8e7ac03792f

  • SHA1

    312f5348786e05a83fff434dad909ce5851cfa77

  • SHA256

    992565db16ea10b24896a693d4259db3ae08a93978c7d71876d85f414d8798f0

  • SHA512

    2e8c442e8d4b6207dc88bb3bf70441d773843580d93a98f973805e49a9bb7bd0af537e0548e00f11b784d0355e3b5e7540f61efd13f63355b9ddacbc31ebe6ad

  • SSDEEP

    1536:gd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5d:AdseIOyEZEyFjEOFqTiQm5l/5d

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      992565db16ea10b24896a693d4259db3ae08a93978c7d71876d85f414d8798f0.exe

    • Size

      92KB

    • MD5

      78e7041bd176cf644b9bb8e7ac03792f

    • SHA1

      312f5348786e05a83fff434dad909ce5851cfa77

    • SHA256

      992565db16ea10b24896a693d4259db3ae08a93978c7d71876d85f414d8798f0

    • SHA512

      2e8c442e8d4b6207dc88bb3bf70441d773843580d93a98f973805e49a9bb7bd0af537e0548e00f11b784d0355e3b5e7540f61efd13f63355b9ddacbc31ebe6ad

    • SSDEEP

      1536:gd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5d:AdseIOyEZEyFjEOFqTiQm5l/5d

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks