General

  • Target

    d41cd8de046a07ad968c5b13c640620dc96615266aedd166a772412df66e8540N.exe

  • Size

    84KB

  • Sample

    241129-zx14yswnas

  • MD5

    073edd0c834bc703e7fa56b9b2a0fc00

  • SHA1

    ec87eb243042bfcdf6ed1bc5e200e91f18625104

  • SHA256

    d41cd8de046a07ad968c5b13c640620dc96615266aedd166a772412df66e8540

  • SHA512

    0be5d15bc05f83e2745635e911b55f6f2a353601b892dfebeb770f57d87d36fbad960c683309159b1889eff1bd10825de0af57ecd70524c4984184ab3bca45d3

  • SSDEEP

    768:MMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:MbIvYvZEyFKF6N4yS+AQmZTl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      d41cd8de046a07ad968c5b13c640620dc96615266aedd166a772412df66e8540N.exe

    • Size

      84KB

    • MD5

      073edd0c834bc703e7fa56b9b2a0fc00

    • SHA1

      ec87eb243042bfcdf6ed1bc5e200e91f18625104

    • SHA256

      d41cd8de046a07ad968c5b13c640620dc96615266aedd166a772412df66e8540

    • SHA512

      0be5d15bc05f83e2745635e911b55f6f2a353601b892dfebeb770f57d87d36fbad960c683309159b1889eff1bd10825de0af57ecd70524c4984184ab3bca45d3

    • SSDEEP

      768:MMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:MbIvYvZEyFKF6N4yS+AQmZTl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks