General

  • Target

    caf3e3d21f09aa927f0dfd376d3afb114e1561b5522d9429504a9684e97e0b50N.exe

  • Size

    61KB

  • Sample

    241130-y4qfcsyjck

  • MD5

    5ea51eae9c69eaa9eaaa4952fb817270

  • SHA1

    ce2ed574329b618ad30574db94aa5bfd919c8693

  • SHA256

    caf3e3d21f09aa927f0dfd376d3afb114e1561b5522d9429504a9684e97e0b50

  • SHA512

    5e651860e084490ffe4e585867c14f7f953424a8a465d7ed42d2d445dcfcebc45fb5714a2405cc8d49f2ee67b76abac9725f51021ad8e5c73231a8190ad279e1

  • SSDEEP

    1536:Id9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ4l/5:4dseIOMEZEyFjEOFqTiQmil/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      caf3e3d21f09aa927f0dfd376d3afb114e1561b5522d9429504a9684e97e0b50N.exe

    • Size

      61KB

    • MD5

      5ea51eae9c69eaa9eaaa4952fb817270

    • SHA1

      ce2ed574329b618ad30574db94aa5bfd919c8693

    • SHA256

      caf3e3d21f09aa927f0dfd376d3afb114e1561b5522d9429504a9684e97e0b50

    • SHA512

      5e651860e084490ffe4e585867c14f7f953424a8a465d7ed42d2d445dcfcebc45fb5714a2405cc8d49f2ee67b76abac9725f51021ad8e5c73231a8190ad279e1

    • SSDEEP

      1536:Id9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ4l/5:4dseIOMEZEyFjEOFqTiQmil/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks