General

  • Target

    4610ce2851185d9411fda736bfd4c99f84ac2b9214c153a816c9948a7c6d1340N.exe

  • Size

    64KB

  • Sample

    241205-3nmrravjeq

  • MD5

    97472f222d2703d030054a9cab746ae0

  • SHA1

    b79c978ad6e7f8d3b7c55506f246b61f2278bfa4

  • SHA256

    4610ce2851185d9411fda736bfd4c99f84ac2b9214c153a816c9948a7c6d1340

  • SHA512

    7f128f7ca106575296fda7912d05a4260e17a3164705d4b581be1360f89933a476710eac4dc747074e1efed107b8b4e34c2df79f1db8f36341a53ce40b01d76d

  • SSDEEP

    768:bMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uA:bbIvYvZEyFKF6N4yS+AQmZcl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      4610ce2851185d9411fda736bfd4c99f84ac2b9214c153a816c9948a7c6d1340N.exe

    • Size

      64KB

    • MD5

      97472f222d2703d030054a9cab746ae0

    • SHA1

      b79c978ad6e7f8d3b7c55506f246b61f2278bfa4

    • SHA256

      4610ce2851185d9411fda736bfd4c99f84ac2b9214c153a816c9948a7c6d1340

    • SHA512

      7f128f7ca106575296fda7912d05a4260e17a3164705d4b581be1360f89933a476710eac4dc747074e1efed107b8b4e34c2df79f1db8f36341a53ce40b01d76d

    • SSDEEP

      768:bMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uA:bbIvYvZEyFKF6N4yS+AQmZcl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks