General

  • Target

    0f7ddef1bcaaa0b84d0b37d68a45b02344918ceecafbe04ad5b576227b639d62N.exe

  • Size

    71KB

  • Sample

    241206-bl9pysslbx

  • MD5

    94aea223130dc03520e4f3f93d4a1c50

  • SHA1

    036bb0e6d5abe906cb35d83594396fe9b402853f

  • SHA256

    0f7ddef1bcaaa0b84d0b37d68a45b02344918ceecafbe04ad5b576227b639d62

  • SHA512

    c1f5dad0a1a3707295f125b795df6b24acf130b4835ae252b79b98d657145c72824d2ecf8364c265e831d48a0f11a667dea330e74a9e3a944ad06f293eb1eea2

  • SSDEEP

    1536:hd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbH:RdseIOMEZEyFjEOFqTiQmQDHIbH

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      0f7ddef1bcaaa0b84d0b37d68a45b02344918ceecafbe04ad5b576227b639d62N.exe

    • Size

      71KB

    • MD5

      94aea223130dc03520e4f3f93d4a1c50

    • SHA1

      036bb0e6d5abe906cb35d83594396fe9b402853f

    • SHA256

      0f7ddef1bcaaa0b84d0b37d68a45b02344918ceecafbe04ad5b576227b639d62

    • SHA512

      c1f5dad0a1a3707295f125b795df6b24acf130b4835ae252b79b98d657145c72824d2ecf8364c265e831d48a0f11a667dea330e74a9e3a944ad06f293eb1eea2

    • SSDEEP

      1536:hd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbH:RdseIOMEZEyFjEOFqTiQmQDHIbH

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks