General

  • Target

    77c37dea54825b69e81b9d14ac1747613180e33c7ddda8b8c1f7db6a727898e5.exe

  • Size

    61KB

  • Sample

    241128-gln15stqbj

  • MD5

    9aa4fe48c6c10382a6e0a8bf173de4d4

  • SHA1

    1a73200f7c814359918d3de71464c6c8c5e9fe6d

  • SHA256

    77c37dea54825b69e81b9d14ac1747613180e33c7ddda8b8c1f7db6a727898e5

  • SHA512

    d449c7b5738a3f371d1d5633559f47443550efbdda0ab940d9d54f4828a8dfc5d9ba3df3a053a2a805540a9096355c1aedcdcb7e099538493fbee61472785ec1

  • SSDEEP

    1536:Md9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZWl/5l:0dseIOMEZEyFjEOFqTiQmUl/5l

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      77c37dea54825b69e81b9d14ac1747613180e33c7ddda8b8c1f7db6a727898e5.exe

    • Size

      61KB

    • MD5

      9aa4fe48c6c10382a6e0a8bf173de4d4

    • SHA1

      1a73200f7c814359918d3de71464c6c8c5e9fe6d

    • SHA256

      77c37dea54825b69e81b9d14ac1747613180e33c7ddda8b8c1f7db6a727898e5

    • SHA512

      d449c7b5738a3f371d1d5633559f47443550efbdda0ab940d9d54f4828a8dfc5d9ba3df3a053a2a805540a9096355c1aedcdcb7e099538493fbee61472785ec1

    • SSDEEP

      1536:Md9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZWl/5l:0dseIOMEZEyFjEOFqTiQmUl/5l

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks