General

  • Target

    26d058323e818ffb41a2dc6bc503219e14c21484db0eff0738895c8f620ce940N.exe

  • Size

    71KB

  • Sample

    241203-ql544axkd1

  • MD5

    955fa5469c2126f8d2b4ddf350ee3c00

  • SHA1

    c0d7e9e882e51c1d44af4cd46ce55f5d9ed50162

  • SHA256

    26d058323e818ffb41a2dc6bc503219e14c21484db0eff0738895c8f620ce940

  • SHA512

    6c30b08fb7df523f4dc5b74f06d164db5d6420f022a74fd9c2f52cf2644b287842b269c9fce8b04f22fd9d12b5d5a1df3232e317e0930e17404e0ac189cca50f

  • SSDEEP

    1536:Qd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbH:QdseIOMEZEyFjEOFqTiQmQDHIbH

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      26d058323e818ffb41a2dc6bc503219e14c21484db0eff0738895c8f620ce940N.exe

    • Size

      71KB

    • MD5

      955fa5469c2126f8d2b4ddf350ee3c00

    • SHA1

      c0d7e9e882e51c1d44af4cd46ce55f5d9ed50162

    • SHA256

      26d058323e818ffb41a2dc6bc503219e14c21484db0eff0738895c8f620ce940

    • SHA512

      6c30b08fb7df523f4dc5b74f06d164db5d6420f022a74fd9c2f52cf2644b287842b269c9fce8b04f22fd9d12b5d5a1df3232e317e0930e17404e0ac189cca50f

    • SSDEEP

      1536:Qd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbH:QdseIOMEZEyFjEOFqTiQmQDHIbH

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks