General

  • Target

    8098437110388791f3582d804176f5ee71bbcbe08c686943a7e77c719dfa43ba.exe

  • Size

    90KB

  • Sample

    241206-12yeaswpcn

  • MD5

    927c632d19cf1a09d6e9d2b053042f28

  • SHA1

    cdbe7a141f9e59ebb085601a0c675fde8322aadc

  • SHA256

    8098437110388791f3582d804176f5ee71bbcbe08c686943a7e77c719dfa43ba

  • SHA512

    06ae5c1ae5bc5c91b306252a44bd41ced3b366b845d3836cc789b35df00fad0988338d8116cac3b03d8e93eeb9731e1d8fe3a0911d86a7f15979f35c7c930a90

  • SSDEEP

    768:9MEIvFGvZEr8LFK0ic46N4zeSdPAHwmZGp6JXXlaa5uAK:9bIvYvZEyFKF6N4aS5AQmZTl/5y

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      8098437110388791f3582d804176f5ee71bbcbe08c686943a7e77c719dfa43ba.exe

    • Size

      90KB

    • MD5

      927c632d19cf1a09d6e9d2b053042f28

    • SHA1

      cdbe7a141f9e59ebb085601a0c675fde8322aadc

    • SHA256

      8098437110388791f3582d804176f5ee71bbcbe08c686943a7e77c719dfa43ba

    • SHA512

      06ae5c1ae5bc5c91b306252a44bd41ced3b366b845d3836cc789b35df00fad0988338d8116cac3b03d8e93eeb9731e1d8fe3a0911d86a7f15979f35c7c930a90

    • SSDEEP

      768:9MEIvFGvZEr8LFK0ic46N4zeSdPAHwmZGp6JXXlaa5uAK:9bIvYvZEyFKF6N4aS5AQmZTl/5y

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks