General

  • Target

    65851c803f16a487e1748343eba610447f396a99c1ebd5cff794af25613b0216N.exe

  • Size

    84KB

  • Sample

    241205-atw86aypdw

  • MD5

    473ddfb6ae7d98674ee92e1ec0f80a80

  • SHA1

    a4e147fcb2f55603a63add10674d9d41175df357

  • SHA256

    65851c803f16a487e1748343eba610447f396a99c1ebd5cff794af25613b0216

  • SHA512

    588cef481c93983b3954dd53858582a353b10827185a0aa74149d30a9683cdf7d8b654b29f45576b075f601dee1752be3601956ffc509af99c9509a80997c394

  • SSDEEP

    768:LMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:LbIvYvZEyFKF6N4yS+AQmZTl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      65851c803f16a487e1748343eba610447f396a99c1ebd5cff794af25613b0216N.exe

    • Size

      84KB

    • MD5

      473ddfb6ae7d98674ee92e1ec0f80a80

    • SHA1

      a4e147fcb2f55603a63add10674d9d41175df357

    • SHA256

      65851c803f16a487e1748343eba610447f396a99c1ebd5cff794af25613b0216

    • SHA512

      588cef481c93983b3954dd53858582a353b10827185a0aa74149d30a9683cdf7d8b654b29f45576b075f601dee1752be3601956ffc509af99c9509a80997c394

    • SSDEEP

      768:LMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:LbIvYvZEyFKF6N4yS+AQmZTl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks