General

  • Target

    749833823d82bcd15e2f2135b962bf8e1a620fb781593e3df72bdd33c4688567N.exe

  • Size

    80KB

  • Sample

    241203-gr4nsaypal

  • MD5

    d3ea83a75ea33c10f3bfd90dedb90b70

  • SHA1

    50ab030a33d76aafda568625b00026bf799b0aa9

  • SHA256

    749833823d82bcd15e2f2135b962bf8e1a620fb781593e3df72bdd33c4688567

  • SHA512

    2269df109684dba78aea4f0b1d9ea895cae5bc60f8dd2982b41baff0ad65ac6df921366ff766bad2e093794e36aa3b148c12bd6ba2eaa946e1fb22edd9556ee4

  • SSDEEP

    768:FfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:FfbIvYvZEyFKF6N4yS+AQmZTl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      749833823d82bcd15e2f2135b962bf8e1a620fb781593e3df72bdd33c4688567N.exe

    • Size

      80KB

    • MD5

      d3ea83a75ea33c10f3bfd90dedb90b70

    • SHA1

      50ab030a33d76aafda568625b00026bf799b0aa9

    • SHA256

      749833823d82bcd15e2f2135b962bf8e1a620fb781593e3df72bdd33c4688567

    • SHA512

      2269df109684dba78aea4f0b1d9ea895cae5bc60f8dd2982b41baff0ad65ac6df921366ff766bad2e093794e36aa3b148c12bd6ba2eaa946e1fb22edd9556ee4

    • SSDEEP

      768:FfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:FfbIvYvZEyFKF6N4yS+AQmZTl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks