General

  • Target

    95a2fff7e4ca432fc0f62a9efa4d6aa800c248f28a1351aec39cedd483f83960N.exe

  • Size

    61KB

  • Sample

    241128-x74aystjar

  • MD5

    140b15c736f1e164e6decc423efac6c0

  • SHA1

    72d90014209a20efbb41632d53e779d5b2d5101c

  • SHA256

    95a2fff7e4ca432fc0f62a9efa4d6aa800c248f28a1351aec39cedd483f83960

  • SHA512

    413183568aa9d5b708a3a20e7fa474d798a12b6167d838b0e1f1c4a73de0812fbc9bfd2b98538e2cc9de5a1975dda31939be2e2446132d83c92bb358cff9e9c9

  • SSDEEP

    1536:md9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZWl/5:edseIOMEZEyFjEOFqTiQmUl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      95a2fff7e4ca432fc0f62a9efa4d6aa800c248f28a1351aec39cedd483f83960N.exe

    • Size

      61KB

    • MD5

      140b15c736f1e164e6decc423efac6c0

    • SHA1

      72d90014209a20efbb41632d53e779d5b2d5101c

    • SHA256

      95a2fff7e4ca432fc0f62a9efa4d6aa800c248f28a1351aec39cedd483f83960

    • SHA512

      413183568aa9d5b708a3a20e7fa474d798a12b6167d838b0e1f1c4a73de0812fbc9bfd2b98538e2cc9de5a1975dda31939be2e2446132d83c92bb358cff9e9c9

    • SSDEEP

      1536:md9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZWl/5:edseIOMEZEyFjEOFqTiQmUl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks