General

  • Target

    a074072e8532a7962482d685815d366a3ff15856f1282ea8c3713a850e53c118.exe

  • Size

    84KB

  • Sample

    241126-3t8leasnbr

  • MD5

    a95f8dffea35785d94c284debb993b59

  • SHA1

    2a96008c5236697a8fdddd059529e674de3cd0b7

  • SHA256

    a074072e8532a7962482d685815d366a3ff15856f1282ea8c3713a850e53c118

  • SHA512

    af6565b9853ba85b40dcace652a2db6269b4276a601bd978286408d9204fdb6f2785cee44cc96561a9e9a26de84f72ba180a48c290ddbf2aeeb1c99be11d6788

  • SSDEEP

    1536:Kd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5b:KdseIOMEZEyFjEOFqTiQm5l/5b

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      a074072e8532a7962482d685815d366a3ff15856f1282ea8c3713a850e53c118.exe

    • Size

      84KB

    • MD5

      a95f8dffea35785d94c284debb993b59

    • SHA1

      2a96008c5236697a8fdddd059529e674de3cd0b7

    • SHA256

      a074072e8532a7962482d685815d366a3ff15856f1282ea8c3713a850e53c118

    • SHA512

      af6565b9853ba85b40dcace652a2db6269b4276a601bd978286408d9204fdb6f2785cee44cc96561a9e9a26de84f72ba180a48c290ddbf2aeeb1c99be11d6788

    • SSDEEP

      1536:Kd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5b:KdseIOMEZEyFjEOFqTiQm5l/5b

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks