General

  • Target

    9fabaf71c06e1701f1fcd3829cf3104464a76afdc74a8eadc9cc6623c06da537N.exe

  • Size

    61KB

  • Sample

    241127-sagcpsvjek

  • MD5

    734aaa0c52852a914a757ebebb6576f0

  • SHA1

    eb8c6fec97cc55f3e9d84015b7aee818a34fa88e

  • SHA256

    9fabaf71c06e1701f1fcd3829cf3104464a76afdc74a8eadc9cc6623c06da537

  • SHA512

    a78a2f614e53fbc41257e862ad0781e136d55a75a5636ff5a0e769f30e10b39f53240bc1f29116f84e672be6c5ac960e3535542b1f417f21c5596453599d4442

  • SSDEEP

    1536:kd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ4l/5:cdseIOMEZEyFjEOFqTiQmil/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      9fabaf71c06e1701f1fcd3829cf3104464a76afdc74a8eadc9cc6623c06da537N.exe

    • Size

      61KB

    • MD5

      734aaa0c52852a914a757ebebb6576f0

    • SHA1

      eb8c6fec97cc55f3e9d84015b7aee818a34fa88e

    • SHA256

      9fabaf71c06e1701f1fcd3829cf3104464a76afdc74a8eadc9cc6623c06da537

    • SHA512

      a78a2f614e53fbc41257e862ad0781e136d55a75a5636ff5a0e769f30e10b39f53240bc1f29116f84e672be6c5ac960e3535542b1f417f21c5596453599d4442

    • SSDEEP

      1536:kd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ4l/5:cdseIOMEZEyFjEOFqTiQmil/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks