General

  • Target

    7a492eaf1df94ad3ffea031e184f81099ed752dce08e77aba9ed657ead97dc3f.exe

  • Size

    64KB

  • Sample

    241206-darq4swpcv

  • MD5

    73e5f0f01bf8368b8b82432b027610e5

  • SHA1

    ecf068b47a2747e0ef0286c6f9d03f2f8aacfaa7

  • SHA256

    7a492eaf1df94ad3ffea031e184f81099ed752dce08e77aba9ed657ead97dc3f

  • SHA512

    46d0172face375c9f10315a571080a1d6af155e4b7209eafb8caf5b90e9761219afeffa54eff935b5d915b009bfbfefe65bd4ee0c7f8207c21291d74f0726791

  • SSDEEP

    768:NMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uA:NbIvYvZEyFKF6N4yS+AQmZcl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      7a492eaf1df94ad3ffea031e184f81099ed752dce08e77aba9ed657ead97dc3f.exe

    • Size

      64KB

    • MD5

      73e5f0f01bf8368b8b82432b027610e5

    • SHA1

      ecf068b47a2747e0ef0286c6f9d03f2f8aacfaa7

    • SHA256

      7a492eaf1df94ad3ffea031e184f81099ed752dce08e77aba9ed657ead97dc3f

    • SHA512

      46d0172face375c9f10315a571080a1d6af155e4b7209eafb8caf5b90e9761219afeffa54eff935b5d915b009bfbfefe65bd4ee0c7f8207c21291d74f0726791

    • SSDEEP

      768:NMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uA:NbIvYvZEyFKF6N4yS+AQmZcl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks