General

  • Target

    41905de9e1205356f23d1860a4754fc861947cae27aee441436d32c71bf72ea8N.exe

  • Size

    61KB

  • Sample

    241205-md891awmcq

  • MD5

    4c802f2573a72d20d8e00283350f9d70

  • SHA1

    71f1bb07cf6dfeb32e2d7c1a32a40f4bf1baf959

  • SHA256

    41905de9e1205356f23d1860a4754fc861947cae27aee441436d32c71bf72ea8

  • SHA512

    c8e5dc99013616bf1c020c8031826ce0d81686fedd03ba5418f99ddb387bcbdf6d340fcbc279a140f94f66cec3ff295c4866466639a81ee17adc7e8709824951

  • SSDEEP

    1536:fd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ4l/5H:XdseIOMEZEyFjEOFqTiQmil/5H

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      41905de9e1205356f23d1860a4754fc861947cae27aee441436d32c71bf72ea8N.exe

    • Size

      61KB

    • MD5

      4c802f2573a72d20d8e00283350f9d70

    • SHA1

      71f1bb07cf6dfeb32e2d7c1a32a40f4bf1baf959

    • SHA256

      41905de9e1205356f23d1860a4754fc861947cae27aee441436d32c71bf72ea8

    • SHA512

      c8e5dc99013616bf1c020c8031826ce0d81686fedd03ba5418f99ddb387bcbdf6d340fcbc279a140f94f66cec3ff295c4866466639a81ee17adc7e8709824951

    • SSDEEP

      1536:fd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ4l/5H:XdseIOMEZEyFjEOFqTiQmil/5H

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks