General

  • Target

    376e2a6a8b394a77d9759700c947ba5ed08d9afc1841cfd25ae0a3a38b5ccae7N.exe

  • Size

    61KB

  • Sample

    241125-l9rt6a1pgs

  • MD5

    487f765aae2a9d9d3bc583e608c27a10

  • SHA1

    b39235fefdbe3a341e0c13e46928e2fdd9022a01

  • SHA256

    376e2a6a8b394a77d9759700c947ba5ed08d9afc1841cfd25ae0a3a38b5ccae7

  • SHA512

    41e4ab9da03d87ad324ce56d18a1aaa02f1f0121d865065beb880a45a0c30572c94c19f9616d7395a0088310d859f5592a04809310ef6fee4e8f36401e3ad601

  • SSDEEP

    768:7MEIvFGvZEr8LFK0ic46N47eSdYAHwmZ7Bp6JXXlaa5uA:7bIvYvZEyFKF6N4yS+AQmZIl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      376e2a6a8b394a77d9759700c947ba5ed08d9afc1841cfd25ae0a3a38b5ccae7N.exe

    • Size

      61KB

    • MD5

      487f765aae2a9d9d3bc583e608c27a10

    • SHA1

      b39235fefdbe3a341e0c13e46928e2fdd9022a01

    • SHA256

      376e2a6a8b394a77d9759700c947ba5ed08d9afc1841cfd25ae0a3a38b5ccae7

    • SHA512

      41e4ab9da03d87ad324ce56d18a1aaa02f1f0121d865065beb880a45a0c30572c94c19f9616d7395a0088310d859f5592a04809310ef6fee4e8f36401e3ad601

    • SSDEEP

      768:7MEIvFGvZEr8LFK0ic46N47eSdYAHwmZ7Bp6JXXlaa5uA:7bIvYvZEyFKF6N4yS+AQmZIl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks