General

  • Target

    3bc1faead5289ca45c3205eedfcd4933727c606e20d340f24d511e6e69c4fdd5N.exe

  • Size

    62KB

  • Sample

    241205-qalw3s1qgr

  • MD5

    eaa1226ce080f627ae1b7970cc599080

  • SHA1

    4e0888d098670f9401b809e4954252c322a0f6d0

  • SHA256

    3bc1faead5289ca45c3205eedfcd4933727c606e20d340f24d511e6e69c4fdd5

  • SHA512

    efb215ad87f7886149ce81c944c42fdcb7faa1603821cb5f87416e769ae100feaacb083e69ca96a0791af9903b3ad142f48ae418a754e2af7c4388ea79959362

  • SSDEEP

    768:oMEIvFGvZEr8LFK0ic46N47eSdYAHwmZQp6JXXlaa5uA:obIvYvZEyFKF6N4yS+AQmZtl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      3bc1faead5289ca45c3205eedfcd4933727c606e20d340f24d511e6e69c4fdd5N.exe

    • Size

      62KB

    • MD5

      eaa1226ce080f627ae1b7970cc599080

    • SHA1

      4e0888d098670f9401b809e4954252c322a0f6d0

    • SHA256

      3bc1faead5289ca45c3205eedfcd4933727c606e20d340f24d511e6e69c4fdd5

    • SHA512

      efb215ad87f7886149ce81c944c42fdcb7faa1603821cb5f87416e769ae100feaacb083e69ca96a0791af9903b3ad142f48ae418a754e2af7c4388ea79959362

    • SSDEEP

      768:oMEIvFGvZEr8LFK0ic46N47eSdYAHwmZQp6JXXlaa5uA:obIvYvZEyFKF6N4yS+AQmZtl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks