General

  • Target

    5893df2469e346c9c03e209a19a6011e4568827807ba736b5086daf7f6f90331N.exe

  • Size

    92KB

  • Sample

    241130-gerhpazmdp

  • MD5

    f8325c3186976a63e49178a45fffaa60

  • SHA1

    a5922f3ea697cc2f4781a8d6bd2e5aa65aae49f4

  • SHA256

    5893df2469e346c9c03e209a19a6011e4568827807ba736b5086daf7f6f90331

  • SHA512

    9b53d1f95d998e4fec414fe2e1f88f483e45d4b12fe2b340383e1f3692fa02f31765f965e719526cf1afcf2ca165ba46272a895410a78350bdd33290c8ac185c

  • SSDEEP

    1536:2d9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5:OdseIOyEZEyFjEOFqTiQm5l/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      5893df2469e346c9c03e209a19a6011e4568827807ba736b5086daf7f6f90331N.exe

    • Size

      92KB

    • MD5

      f8325c3186976a63e49178a45fffaa60

    • SHA1

      a5922f3ea697cc2f4781a8d6bd2e5aa65aae49f4

    • SHA256

      5893df2469e346c9c03e209a19a6011e4568827807ba736b5086daf7f6f90331

    • SHA512

      9b53d1f95d998e4fec414fe2e1f88f483e45d4b12fe2b340383e1f3692fa02f31765f965e719526cf1afcf2ca165ba46272a895410a78350bdd33290c8ac185c

    • SSDEEP

      1536:2d9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5:OdseIOyEZEyFjEOFqTiQm5l/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks