General

  • Target

    de28115dbb62f23a0a75f2b04792403b16efae8667742e1f34471e6043f49f69N.exe

  • Size

    61KB

  • Sample

    241129-x2caaawqdr

  • MD5

    ecfa424020dc3bb609e8b24c077cbbf0

  • SHA1

    92f8a767ac32cbe7b407d8b7c33e0909fd744e9b

  • SHA256

    de28115dbb62f23a0a75f2b04792403b16efae8667742e1f34471e6043f49f69

  • SHA512

    0d802a25cdfe4d85a4b5c4a56849c2955b65851e5cbe48bcc560a5419ca0833efe7d108e2ab7fc34d0d8d42066328e4dd072c04c6360a2aad5fca6725a121c03

  • SSDEEP

    1536:Xd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ4l/5:fdseIOMEZEyFjEOFqTiQmil/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      de28115dbb62f23a0a75f2b04792403b16efae8667742e1f34471e6043f49f69N.exe

    • Size

      61KB

    • MD5

      ecfa424020dc3bb609e8b24c077cbbf0

    • SHA1

      92f8a767ac32cbe7b407d8b7c33e0909fd744e9b

    • SHA256

      de28115dbb62f23a0a75f2b04792403b16efae8667742e1f34471e6043f49f69

    • SHA512

      0d802a25cdfe4d85a4b5c4a56849c2955b65851e5cbe48bcc560a5419ca0833efe7d108e2ab7fc34d0d8d42066328e4dd072c04c6360a2aad5fca6725a121c03

    • SSDEEP

      1536:Xd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ4l/5:fdseIOMEZEyFjEOFqTiQmil/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks