General

  • Target

    2a83b0d1152365d0fd981deae59c384e950119abd9f53bb2d854c6628e8e94a3N.exe

  • Size

    61KB

  • Sample

    241206-gvcpgazkcl

  • MD5

    78bbed686fcb6e7e69a4a260ccbaf890

  • SHA1

    252b382498bac37f7e877f1cee13ba0c456bb75e

  • SHA256

    2a83b0d1152365d0fd981deae59c384e950119abd9f53bb2d854c6628e8e94a3

  • SHA512

    ecb4509aa420776c0d00b43a9a4fc53c5e3206aa44263038c8ad070e6692f74703f7ac6fabcef14ca10e7d0237c9d300a996a6d5b67e70509e54c41d2de7bc41

  • SSDEEP

    1536:ld9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ4l/5P:NdseIOMEZEyFjEOFqTiQmil/5P

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      2a83b0d1152365d0fd981deae59c384e950119abd9f53bb2d854c6628e8e94a3N.exe

    • Size

      61KB

    • MD5

      78bbed686fcb6e7e69a4a260ccbaf890

    • SHA1

      252b382498bac37f7e877f1cee13ba0c456bb75e

    • SHA256

      2a83b0d1152365d0fd981deae59c384e950119abd9f53bb2d854c6628e8e94a3

    • SHA512

      ecb4509aa420776c0d00b43a9a4fc53c5e3206aa44263038c8ad070e6692f74703f7ac6fabcef14ca10e7d0237c9d300a996a6d5b67e70509e54c41d2de7bc41

    • SSDEEP

      1536:ld9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ4l/5P:NdseIOMEZEyFjEOFqTiQmil/5P

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks