General

  • Target

    308c56dead16e4a6150d64084db9a4173d6f82676ced5773d4ca9f918a1b15e7.exe

  • Size

    80KB

  • Sample

    241202-e9yt5szngx

  • MD5

    ce306668b086c19e164f906003b26283

  • SHA1

    7df364972f9f650b360135e39fedcc11db439d56

  • SHA256

    308c56dead16e4a6150d64084db9a4173d6f82676ced5773d4ca9f918a1b15e7

  • SHA512

    8bd137a6a9c46dbe7134fd29af80ba20f32393de2dfae077f01411cb702470004380738bf3d5aafb78f19b301ee8739458b8f4010798d54067064bad155b3fb4

  • SSDEEP

    1536:fd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzT:XdseIOMEZEyFjEOFqTiQmOl/5xPvwX

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      308c56dead16e4a6150d64084db9a4173d6f82676ced5773d4ca9f918a1b15e7.exe

    • Size

      80KB

    • MD5

      ce306668b086c19e164f906003b26283

    • SHA1

      7df364972f9f650b360135e39fedcc11db439d56

    • SHA256

      308c56dead16e4a6150d64084db9a4173d6f82676ced5773d4ca9f918a1b15e7

    • SHA512

      8bd137a6a9c46dbe7134fd29af80ba20f32393de2dfae077f01411cb702470004380738bf3d5aafb78f19b301ee8739458b8f4010798d54067064bad155b3fb4

    • SSDEEP

      1536:fd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzT:XdseIOMEZEyFjEOFqTiQmOl/5xPvwX

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks