General

  • Target

    b9812e755a69b3af67d692ba4d2cfe5c6c9bd114ae8d892e03dd90d5e6463dc4.exe

  • Size

    76KB

  • Sample

    241206-k61r8awlfm

  • MD5

    54671b1978545adcabcd1af11ee404fc

  • SHA1

    509ad6c0bcaae5b039072de1901573ebdb593afd

  • SHA256

    b9812e755a69b3af67d692ba4d2cfe5c6c9bd114ae8d892e03dd90d5e6463dc4

  • SHA512

    dec6d7c69fc5edad231c81f3a94cef5fc36725ddf0ae6d2b40500aab6d9ffa377bec85b72520303b378818c4b34586a22c4db8586e47d1231fbcffde4fbaf780

  • SSDEEP

    768:KMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAWr:KbIvYvZEyFKF6N4yS+AQmZTl/5Or

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      b9812e755a69b3af67d692ba4d2cfe5c6c9bd114ae8d892e03dd90d5e6463dc4.exe

    • Size

      76KB

    • MD5

      54671b1978545adcabcd1af11ee404fc

    • SHA1

      509ad6c0bcaae5b039072de1901573ebdb593afd

    • SHA256

      b9812e755a69b3af67d692ba4d2cfe5c6c9bd114ae8d892e03dd90d5e6463dc4

    • SHA512

      dec6d7c69fc5edad231c81f3a94cef5fc36725ddf0ae6d2b40500aab6d9ffa377bec85b72520303b378818c4b34586a22c4db8586e47d1231fbcffde4fbaf780

    • SSDEEP

      768:KMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAWr:KbIvYvZEyFKF6N4yS+AQmZTl/5Or

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks