General

  • Target

    58142ba5242844324d015b2aadd965e79518a07a8334f7b9cbc7739cce323627.exe

  • Size

    61KB

  • Sample

    241206-aqfr1aznc1

  • MD5

    71b167567fdf671e6fd71b304f079546

  • SHA1

    66114cf4a991b64ee59c92d61715e17c31346ff7

  • SHA256

    58142ba5242844324d015b2aadd965e79518a07a8334f7b9cbc7739cce323627

  • SHA512

    7ee29435a37d96ee19ab36be00fc54dcc0c12c60c4897790b092bc5d6ac1ea70fe507cb436df1e5dc003a4c4ac69141f89c1eb83e601e55a4e01acc02a0e5103

  • SSDEEP

    1536:ld9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ4l/5H:NdseIOMEZEyFjEOFqTiQmil/5H

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      58142ba5242844324d015b2aadd965e79518a07a8334f7b9cbc7739cce323627.exe

    • Size

      61KB

    • MD5

      71b167567fdf671e6fd71b304f079546

    • SHA1

      66114cf4a991b64ee59c92d61715e17c31346ff7

    • SHA256

      58142ba5242844324d015b2aadd965e79518a07a8334f7b9cbc7739cce323627

    • SHA512

      7ee29435a37d96ee19ab36be00fc54dcc0c12c60c4897790b092bc5d6ac1ea70fe507cb436df1e5dc003a4c4ac69141f89c1eb83e601e55a4e01acc02a0e5103

    • SSDEEP

      1536:ld9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ4l/5H:NdseIOMEZEyFjEOFqTiQmil/5H

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks