General

  • Target

    b561bf95e7f8b9d49b7d2a35bf9707605d179e0c52b658e0e86ba986a8a15c9eN.exe

  • Size

    80KB

  • Sample

    241128-3mpvqavmaz

  • MD5

    e75273806a2269f82d7de52bb1e7aef0

  • SHA1

    04e9a96117282e0f9d03c78f240bda153f5bfffd

  • SHA256

    b561bf95e7f8b9d49b7d2a35bf9707605d179e0c52b658e0e86ba986a8a15c9e

  • SHA512

    1746af1dbc275c4f9c0379c163fd0b129e51d220db76c569df323832e5d2b6fcc974df05a14fedcf77c54e9e74f2e96837d14c983308fa05958f219378c652f2

  • SSDEEP

    1536:6d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9Xwzz:adseIOMEZEyFjEOFqTiQmOl/5xPvw3

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      b561bf95e7f8b9d49b7d2a35bf9707605d179e0c52b658e0e86ba986a8a15c9eN.exe

    • Size

      80KB

    • MD5

      e75273806a2269f82d7de52bb1e7aef0

    • SHA1

      04e9a96117282e0f9d03c78f240bda153f5bfffd

    • SHA256

      b561bf95e7f8b9d49b7d2a35bf9707605d179e0c52b658e0e86ba986a8a15c9e

    • SHA512

      1746af1dbc275c4f9c0379c163fd0b129e51d220db76c569df323832e5d2b6fcc974df05a14fedcf77c54e9e74f2e96837d14c983308fa05958f219378c652f2

    • SSDEEP

      1536:6d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9Xwzz:adseIOMEZEyFjEOFqTiQmOl/5xPvw3

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks