General

  • Target

    74c5241eb0d52d4b3c368b114ec82ea1c605bbd1840a6437ce7582ae303b7f33N.exe

  • Size

    84KB

  • Sample

    241203-q363qatldm

  • MD5

    aa6d3f6a6bb159ee1d35d4859e664190

  • SHA1

    8b9b60d42a5f42435bfa03cc7448c1b9b90fc3b3

  • SHA256

    74c5241eb0d52d4b3c368b114ec82ea1c605bbd1840a6437ce7582ae303b7f33

  • SHA512

    186c7be6f9312317fca1dc9cd2926d12326b13adf9828e5e90f95e0ffe8bbb0ae529a5e2b1409ebe0aabf1ae8f5fda7ee565c6baba814016fc052a074ce3b4ae

  • SSDEEP

    768:/MEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:/bIvYvZEyFKF6N4yS+AQmZTl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      74c5241eb0d52d4b3c368b114ec82ea1c605bbd1840a6437ce7582ae303b7f33N.exe

    • Size

      84KB

    • MD5

      aa6d3f6a6bb159ee1d35d4859e664190

    • SHA1

      8b9b60d42a5f42435bfa03cc7448c1b9b90fc3b3

    • SHA256

      74c5241eb0d52d4b3c368b114ec82ea1c605bbd1840a6437ce7582ae303b7f33

    • SHA512

      186c7be6f9312317fca1dc9cd2926d12326b13adf9828e5e90f95e0ffe8bbb0ae529a5e2b1409ebe0aabf1ae8f5fda7ee565c6baba814016fc052a074ce3b4ae

    • SSDEEP

      768:/MEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:/bIvYvZEyFKF6N4yS+AQmZTl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks