General

  • Target

    f9700cc60bd68045468817edb0249d075ffe510fe19e21d5246229eaf9a74a3d.exe

  • Size

    80KB

  • Sample

    241130-y5ltkatpgt

  • MD5

    96118f09644ca13af64fe49b35b0e320

  • SHA1

    eed96488981cf3dff1697b845a8a0ff6ea6b0c08

  • SHA256

    f9700cc60bd68045468817edb0249d075ffe510fe19e21d5246229eaf9a74a3d

  • SHA512

    5a8bf5d6bc2f621f42cde2bcea3b626b2501e913356b93c46a79019c633e0c59918708cfc85fe97abf7fd0f8a50cfe083a9975ae6d8a0a4cb994b5a2bf7f6e3d

  • SSDEEP

    768:6fMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAq:6fbIvYvZEyFKF6N4yS+AQmZTl/5y

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      f9700cc60bd68045468817edb0249d075ffe510fe19e21d5246229eaf9a74a3d.exe

    • Size

      80KB

    • MD5

      96118f09644ca13af64fe49b35b0e320

    • SHA1

      eed96488981cf3dff1697b845a8a0ff6ea6b0c08

    • SHA256

      f9700cc60bd68045468817edb0249d075ffe510fe19e21d5246229eaf9a74a3d

    • SHA512

      5a8bf5d6bc2f621f42cde2bcea3b626b2501e913356b93c46a79019c633e0c59918708cfc85fe97abf7fd0f8a50cfe083a9975ae6d8a0a4cb994b5a2bf7f6e3d

    • SSDEEP

      768:6fMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAq:6fbIvYvZEyFKF6N4yS+AQmZTl/5y

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks