General

  • Target

    f629b2957081d848e3efcdf4a7036074ea6a784666d4bacaef48f7de6d30c704.exe

  • Size

    84KB

  • Sample

    241204-bpn8estqgw

  • MD5

    eae48bd5e7a4ba1036347bc6b3638553

  • SHA1

    ebbbad143177eaee7b5e356d4d7bddb7ed189c45

  • SHA256

    f629b2957081d848e3efcdf4a7036074ea6a784666d4bacaef48f7de6d30c704

  • SHA512

    8712cddbc9cbe8fa4c47a72649bcf43bb4029289a2e795110756b193a330064a7d70e689ef45022c706244ff35be6b115946f1165ae5d737bd8aac615ba8d2e7

  • SSDEEP

    1536:zd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5w:zdseIOMEZEyFjEOFqTiQm5l/5w

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      f629b2957081d848e3efcdf4a7036074ea6a784666d4bacaef48f7de6d30c704.exe

    • Size

      84KB

    • MD5

      eae48bd5e7a4ba1036347bc6b3638553

    • SHA1

      ebbbad143177eaee7b5e356d4d7bddb7ed189c45

    • SHA256

      f629b2957081d848e3efcdf4a7036074ea6a784666d4bacaef48f7de6d30c704

    • SHA512

      8712cddbc9cbe8fa4c47a72649bcf43bb4029289a2e795110756b193a330064a7d70e689ef45022c706244ff35be6b115946f1165ae5d737bd8aac615ba8d2e7

    • SSDEEP

      1536:zd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5w:zdseIOMEZEyFjEOFqTiQm5l/5w

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks