General

  • Target

    8891257eb0c5f2f5174bb4d8263576f1c3db1ef337c1995970b12471d80c58f6N.exe

  • Size

    80KB

  • Sample

    241205-ayrjgavndq

  • MD5

    4affced65f7e21ae8f762cdec29cc000

  • SHA1

    f97e21b5cb05ba69532165946d39e52d0b57025e

  • SHA256

    8891257eb0c5f2f5174bb4d8263576f1c3db1ef337c1995970b12471d80c58f6

  • SHA512

    580ef2762e6038af7534b5a355bf00dfb5b82010cdbf949b680d603b3fb92f592cd3dc6b7c4e4885b7d3a247c0e29acf97c51e62fca3428f2e04e0d5113574a4

  • SSDEEP

    768:nfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:nfbIvYvZEyFKF6N4yS+AQmZTl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      8891257eb0c5f2f5174bb4d8263576f1c3db1ef337c1995970b12471d80c58f6N.exe

    • Size

      80KB

    • MD5

      4affced65f7e21ae8f762cdec29cc000

    • SHA1

      f97e21b5cb05ba69532165946d39e52d0b57025e

    • SHA256

      8891257eb0c5f2f5174bb4d8263576f1c3db1ef337c1995970b12471d80c58f6

    • SHA512

      580ef2762e6038af7534b5a355bf00dfb5b82010cdbf949b680d603b3fb92f592cd3dc6b7c4e4885b7d3a247c0e29acf97c51e62fca3428f2e04e0d5113574a4

    • SSDEEP

      768:nfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:nfbIvYvZEyFKF6N4yS+AQmZTl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks