General

  • Target

    01676c9ca954f37508ad1b02c99c1445f060f9c21bb9f9981727f5d2fdc432d4.exe

  • Size

    71KB

  • Sample

    241205-a1bwssyrdx

  • MD5

    d588af58bca8629fe31730f728d519d4

  • SHA1

    8fc9e20019467a2d59d0894bf8dd7becd39a55a1

  • SHA256

    01676c9ca954f37508ad1b02c99c1445f060f9c21bb9f9981727f5d2fdc432d4

  • SHA512

    334d6603c605ed9c29e52f4fc901b76472f50df72de52b051ed169633c2b215e1cc96f6f34a4561a924ab2948d84e75060eaaa171dafbc6294c458d3c0c19c0f

  • SSDEEP

    1536:hd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbHH:RdseIOMEZEyFjEOFqTiQmQDHIbHH

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      01676c9ca954f37508ad1b02c99c1445f060f9c21bb9f9981727f5d2fdc432d4.exe

    • Size

      71KB

    • MD5

      d588af58bca8629fe31730f728d519d4

    • SHA1

      8fc9e20019467a2d59d0894bf8dd7becd39a55a1

    • SHA256

      01676c9ca954f37508ad1b02c99c1445f060f9c21bb9f9981727f5d2fdc432d4

    • SHA512

      334d6603c605ed9c29e52f4fc901b76472f50df72de52b051ed169633c2b215e1cc96f6f34a4561a924ab2948d84e75060eaaa171dafbc6294c458d3c0c19c0f

    • SSDEEP

      1536:hd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbHH:RdseIOMEZEyFjEOFqTiQmQDHIbHH

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks