General

  • Target

    7fe63f0840c48a6d0c23307f1e98c1a35e062431597eff16855ce8917afe01e3N.exe

  • Size

    33KB

  • Sample

    241205-aagdlatmgj

  • MD5

    af75ff6f7d516b8f396e7ab5d0a2bc80

  • SHA1

    3ce0bab9d5280283007fe420f311f42c0baeecf6

  • SHA256

    7fe63f0840c48a6d0c23307f1e98c1a35e062431597eff16855ce8917afe01e3

  • SHA512

    a85b438b16dac783c35b6b55ce8442c3727bbc7e0fa6a0cf073c9f72c02d210931eb8688842b61465efab2fad23a4013ecb5d0bc14ce3a6bf3c2b03d47819e64

  • SSDEEP

    768:HfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7DB:HfVRztyHo8QNHTk0qE5fslvN/956qQ

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      7fe63f0840c48a6d0c23307f1e98c1a35e062431597eff16855ce8917afe01e3N.exe

    • Size

      33KB

    • MD5

      af75ff6f7d516b8f396e7ab5d0a2bc80

    • SHA1

      3ce0bab9d5280283007fe420f311f42c0baeecf6

    • SHA256

      7fe63f0840c48a6d0c23307f1e98c1a35e062431597eff16855ce8917afe01e3

    • SHA512

      a85b438b16dac783c35b6b55ce8442c3727bbc7e0fa6a0cf073c9f72c02d210931eb8688842b61465efab2fad23a4013ecb5d0bc14ce3a6bf3c2b03d47819e64

    • SSDEEP

      768:HfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7DB:HfVRztyHo8QNHTk0qE5fslvN/956qQ

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks