General

  • Target

    08d828aeb27484f2d29c2dacf522e75c43ceda3afdd64a0c79e76a28bb32724b.exe

  • Size

    80KB

  • Sample

    241206-b6wntszjhp

  • MD5

    bb7172d759a55044a6a5b48b3ddab5b6

  • SHA1

    dfae366a0746891116f89d849fd7764b4fa04abe

  • SHA256

    08d828aeb27484f2d29c2dacf522e75c43ceda3afdd64a0c79e76a28bb32724b

  • SHA512

    aa713b60144290da3f03abf22b44e3259c14358f8184159e22bd295dc00a072ec02d6d2f3e09c67360c05f7c83fc44ef99435187eb90c9dd0e9a16a46cd2cfbc

  • SSDEEP

    768:6fMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAO:6fbIvYvZEyFKF6N4yS+AQmZTl/5m

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      08d828aeb27484f2d29c2dacf522e75c43ceda3afdd64a0c79e76a28bb32724b.exe

    • Size

      80KB

    • MD5

      bb7172d759a55044a6a5b48b3ddab5b6

    • SHA1

      dfae366a0746891116f89d849fd7764b4fa04abe

    • SHA256

      08d828aeb27484f2d29c2dacf522e75c43ceda3afdd64a0c79e76a28bb32724b

    • SHA512

      aa713b60144290da3f03abf22b44e3259c14358f8184159e22bd295dc00a072ec02d6d2f3e09c67360c05f7c83fc44ef99435187eb90c9dd0e9a16a46cd2cfbc

    • SSDEEP

      768:6fMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAO:6fbIvYvZEyFKF6N4yS+AQmZTl/5m

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks