General

  • Target

    23fb8519c5a239eb0868dfaba0df8939df777e81e44dc73d00852401a0c5e7d3N.exe

  • Size

    80KB

  • Sample

    241205-gqtges1qhx

  • MD5

    ddd89d6efef5086643807602e3759680

  • SHA1

    d443699e56adf2b3d34a8aabd7caddc31f639004

  • SHA256

    23fb8519c5a239eb0868dfaba0df8939df777e81e44dc73d00852401a0c5e7d3

  • SHA512

    dd7203a90aa27942f9b4e43363d154d634519f586ce276c1b2cc7a29cbd0ecf9e6972703a8396497a517363e63514e54b9067966f56074f046ce5cba921c51bd

  • SSDEEP

    768:GfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA6:GfbIvYvZEyFKF6N4yS+AQmZTl/5i

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      23fb8519c5a239eb0868dfaba0df8939df777e81e44dc73d00852401a0c5e7d3N.exe

    • Size

      80KB

    • MD5

      ddd89d6efef5086643807602e3759680

    • SHA1

      d443699e56adf2b3d34a8aabd7caddc31f639004

    • SHA256

      23fb8519c5a239eb0868dfaba0df8939df777e81e44dc73d00852401a0c5e7d3

    • SHA512

      dd7203a90aa27942f9b4e43363d154d634519f586ce276c1b2cc7a29cbd0ecf9e6972703a8396497a517363e63514e54b9067966f56074f046ce5cba921c51bd

    • SSDEEP

      768:GfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA6:GfbIvYvZEyFKF6N4yS+AQmZTl/5i

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks