General

  • Target

    e43600e7b7154a3a7f4dd3bf2fbfc3ff4cde0e20ab40e09de89f4c4f4e0ca460N.exe

  • Size

    61KB

  • Sample

    241206-m33hraznbj

  • MD5

    afe192e370ad5c643ff6206e7a3ce7c0

  • SHA1

    dd09e9c3007b2b6d34aa96da52df528f12582e72

  • SHA256

    e43600e7b7154a3a7f4dd3bf2fbfc3ff4cde0e20ab40e09de89f4c4f4e0ca460

  • SHA512

    493d323c966a996c774c0cb5416c401eb087e019682af8b7abb07b5ad737b88b1e57db9d3ecf233a22ac5767fe167e991824d2a7cf911151d529ab94b55ff3cd

  • SSDEEP

    1536:td9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZxl/5:FdseIOMEZEyFjEOFqTiQmTl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      e43600e7b7154a3a7f4dd3bf2fbfc3ff4cde0e20ab40e09de89f4c4f4e0ca460N.exe

    • Size

      61KB

    • MD5

      afe192e370ad5c643ff6206e7a3ce7c0

    • SHA1

      dd09e9c3007b2b6d34aa96da52df528f12582e72

    • SHA256

      e43600e7b7154a3a7f4dd3bf2fbfc3ff4cde0e20ab40e09de89f4c4f4e0ca460

    • SHA512

      493d323c966a996c774c0cb5416c401eb087e019682af8b7abb07b5ad737b88b1e57db9d3ecf233a22ac5767fe167e991824d2a7cf911151d529ab94b55ff3cd

    • SSDEEP

      1536:td9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZxl/5:FdseIOMEZEyFjEOFqTiQmTl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks