General

  • Target

    6987e71b951c05d806f84873faee310dc823795bc8e13c095a8894b0d7ed32d9N.exe

  • Size

    88KB

  • Sample

    241206-fj3abaxkdl

  • MD5

    9496eb5e9351c7b820bb6febabbd8880

  • SHA1

    16adc27f75454571306922704fd696d3da7fc14d

  • SHA256

    6987e71b951c05d806f84873faee310dc823795bc8e13c095a8894b0d7ed32d9

  • SHA512

    6344b4f06a1c6c8418bbbff05cc73d5b3ede856da3c85bf74c4c3b2be094aa54225f36565ca9ebc2fd029145f1943bc44615aee4b6f635803170bd6a3382f65b

  • SSDEEP

    1536:Rd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5z:hdseIOMEZEyFjEOFqTiQm5l/5z

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      6987e71b951c05d806f84873faee310dc823795bc8e13c095a8894b0d7ed32d9N.exe

    • Size

      88KB

    • MD5

      9496eb5e9351c7b820bb6febabbd8880

    • SHA1

      16adc27f75454571306922704fd696d3da7fc14d

    • SHA256

      6987e71b951c05d806f84873faee310dc823795bc8e13c095a8894b0d7ed32d9

    • SHA512

      6344b4f06a1c6c8418bbbff05cc73d5b3ede856da3c85bf74c4c3b2be094aa54225f36565ca9ebc2fd029145f1943bc44615aee4b6f635803170bd6a3382f65b

    • SSDEEP

      1536:Rd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5z:hdseIOMEZEyFjEOFqTiQm5l/5z

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks