General

  • Target

    7d7a143a035fe414fb73530625239f322f73f2a5094dfb6d26d28ae7d5958600N.exe

  • Size

    61KB

  • Sample

    241130-sfx8eawrht

  • MD5

    f7938e985ac3dfd794c4f707c8bc6f40

  • SHA1

    beb039cba31e32b2ff7987e6cbf81327ab6f7fa3

  • SHA256

    7d7a143a035fe414fb73530625239f322f73f2a5094dfb6d26d28ae7d5958600

  • SHA512

    1864ee7697bd231a60bc2d0d3fc4fc33bcdc9550a2c7e1e179420c7b6062177376bb501bdeecc696a639d06a7db3d013a72f229e982e91b29c01413cb8c1c0dd

  • SSDEEP

    1536:Md9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZWl/5:0dseIOMEZEyFjEOFqTiQmUl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      7d7a143a035fe414fb73530625239f322f73f2a5094dfb6d26d28ae7d5958600N.exe

    • Size

      61KB

    • MD5

      f7938e985ac3dfd794c4f707c8bc6f40

    • SHA1

      beb039cba31e32b2ff7987e6cbf81327ab6f7fa3

    • SHA256

      7d7a143a035fe414fb73530625239f322f73f2a5094dfb6d26d28ae7d5958600

    • SHA512

      1864ee7697bd231a60bc2d0d3fc4fc33bcdc9550a2c7e1e179420c7b6062177376bb501bdeecc696a639d06a7db3d013a72f229e982e91b29c01413cb8c1c0dd

    • SSDEEP

      1536:Md9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZWl/5:0dseIOMEZEyFjEOFqTiQmUl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks