General

  • Target

    0d353c8ab098cf0b6f822d38b9bd0373b47a7e4066ac6d4a327935ec78c32825N.exe

  • Size

    76KB

  • Sample

    241204-z4yx6sxnal

  • MD5

    78186ad83fb7ef5210e41709abef2740

  • SHA1

    f2acb5485855725b289b5f8d8b42ef2ba03d7598

  • SHA256

    0d353c8ab098cf0b6f822d38b9bd0373b47a7e4066ac6d4a327935ec78c32825

  • SHA512

    e1b3a2e16ceaf7ade9ee4e0dc2f1172b0e828b069cd9d5ce365bcb37f165d40b37f68c9e0248cd7f46d9f1f6319a895ff95e902cef290e3607c397492825d9e8

  • SSDEEP

    1536:Ed9dseIOcE93NIvYvZEyFhEEOF6N4yS+AQmZTl/5s11:8dseIOKEZEyF6EOFqTiQm5l/5s11

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      0d353c8ab098cf0b6f822d38b9bd0373b47a7e4066ac6d4a327935ec78c32825N.exe

    • Size

      76KB

    • MD5

      78186ad83fb7ef5210e41709abef2740

    • SHA1

      f2acb5485855725b289b5f8d8b42ef2ba03d7598

    • SHA256

      0d353c8ab098cf0b6f822d38b9bd0373b47a7e4066ac6d4a327935ec78c32825

    • SHA512

      e1b3a2e16ceaf7ade9ee4e0dc2f1172b0e828b069cd9d5ce365bcb37f165d40b37f68c9e0248cd7f46d9f1f6319a895ff95e902cef290e3607c397492825d9e8

    • SSDEEP

      1536:Ed9dseIOcE93NIvYvZEyFhEEOF6N4yS+AQmZTl/5s11:8dseIOKEZEyF6EOFqTiQm5l/5s11

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks