General

  • Target

    aa785ad971e52046093566ccdf1c349021ce7077aa1f5780eb78fd1fc3cb44c4.exe

  • Size

    90KB

  • Sample

    241127-qd6qna1mfq

  • MD5

    938312316541b2ea8df97ead25238756

  • SHA1

    3c521109cb6909591eb61cced5ccc1ffd2dcf923

  • SHA256

    aa785ad971e52046093566ccdf1c349021ce7077aa1f5780eb78fd1fc3cb44c4

  • SHA512

    efb1179aca0f3f1e350e9e6a117297e7d24b41dc62fa16019926e0f27ab760f528f8bd71e121257f0d922368f6b1cab0029ce43e9a289a92bbb56eb6b1377d36

  • SSDEEP

    768:yMEIvFGvZEr8LFK0ic46N4zeSdPAHwmZGp6JXXlaa5uAO:ybIvYvZEyFKF6N4aS5AQmZTl/5G

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      aa785ad971e52046093566ccdf1c349021ce7077aa1f5780eb78fd1fc3cb44c4.exe

    • Size

      90KB

    • MD5

      938312316541b2ea8df97ead25238756

    • SHA1

      3c521109cb6909591eb61cced5ccc1ffd2dcf923

    • SHA256

      aa785ad971e52046093566ccdf1c349021ce7077aa1f5780eb78fd1fc3cb44c4

    • SHA512

      efb1179aca0f3f1e350e9e6a117297e7d24b41dc62fa16019926e0f27ab760f528f8bd71e121257f0d922368f6b1cab0029ce43e9a289a92bbb56eb6b1377d36

    • SSDEEP

      768:yMEIvFGvZEr8LFK0ic46N4zeSdPAHwmZGp6JXXlaa5uAO:ybIvYvZEyFKF6N4aS5AQmZTl/5G

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks