General

  • Target

    4f3317b0f1c553aa0e6ca39c3e3e01ed9afa349942cc66a998aa1ac7922ee020.exe

  • Size

    80KB

  • Sample

    241206-aalnbaypfz

  • MD5

    429c9bd1a87eeddaef654ff0e423bbe8

  • SHA1

    bfc03adeca294e7a7e3b939e14c02c6dd6bbfd04

  • SHA256

    4f3317b0f1c553aa0e6ca39c3e3e01ed9afa349942cc66a998aa1ac7922ee020

  • SHA512

    ac763cbd262f57be05d96c55d89e5e5a2433b22eac2adeadcc72f77c6074cc7d41cd37ed25c0fc6e1e5fae39821ca0cfec18b7d0faa9d3e053867af8743ff215

  • SSDEEP

    768:GfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAa:GfbIvYvZEyFKF6N4yS+AQmZTl/5C

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      4f3317b0f1c553aa0e6ca39c3e3e01ed9afa349942cc66a998aa1ac7922ee020.exe

    • Size

      80KB

    • MD5

      429c9bd1a87eeddaef654ff0e423bbe8

    • SHA1

      bfc03adeca294e7a7e3b939e14c02c6dd6bbfd04

    • SHA256

      4f3317b0f1c553aa0e6ca39c3e3e01ed9afa349942cc66a998aa1ac7922ee020

    • SHA512

      ac763cbd262f57be05d96c55d89e5e5a2433b22eac2adeadcc72f77c6074cc7d41cd37ed25c0fc6e1e5fae39821ca0cfec18b7d0faa9d3e053867af8743ff215

    • SSDEEP

      768:GfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAa:GfbIvYvZEyFKF6N4yS+AQmZTl/5C

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks