General

  • Target

    8615324a97f5362ed0161b5da39289e29d1cd08f5486e757d8eba5adf37ab2a9N.exe

  • Size

    61KB

  • Sample

    241203-2adq9axlfx

  • MD5

    caf1961e3d4995061f68efa7da281090

  • SHA1

    525894d37e524fed84e86b949e1192add8ea666a

  • SHA256

    8615324a97f5362ed0161b5da39289e29d1cd08f5486e757d8eba5adf37ab2a9

  • SHA512

    248bda9ffbda6d98a28f558732aee9ba6da9ea421faec01494b72d79fdb112f3ff9016e041e1902779e95dec413c38fe130702a7f08123fa9afebaec1ec080e1

  • SSDEEP

    1536:sd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZnql/5:UdseIOMEZEyFjEOFqTiQmFql/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      8615324a97f5362ed0161b5da39289e29d1cd08f5486e757d8eba5adf37ab2a9N.exe

    • Size

      61KB

    • MD5

      caf1961e3d4995061f68efa7da281090

    • SHA1

      525894d37e524fed84e86b949e1192add8ea666a

    • SHA256

      8615324a97f5362ed0161b5da39289e29d1cd08f5486e757d8eba5adf37ab2a9

    • SHA512

      248bda9ffbda6d98a28f558732aee9ba6da9ea421faec01494b72d79fdb112f3ff9016e041e1902779e95dec413c38fe130702a7f08123fa9afebaec1ec080e1

    • SSDEEP

      1536:sd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZnql/5:UdseIOMEZEyFjEOFqTiQmFql/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks