General

  • Target

    5f00bc8c61754ddc2adb4602589278c714f84fc5e6977ff0d0562fc9f81f74afN.exe

  • Size

    76KB

  • Sample

    241206-px776atncl

  • MD5

    a8ad3d8ab73c1595dd51afe2bf59b5a0

  • SHA1

    ba1f9e97cee2323267598beca461902afb3fb1cb

  • SHA256

    5f00bc8c61754ddc2adb4602589278c714f84fc5e6977ff0d0562fc9f81f74af

  • SHA512

    42f932316f2ae2a333182980de31b9961defe4629e3140c307e38ecb1862c32a5a8bf621e0b7e2d5e3c806e85ca17e3c822d43e3c01a8f49bf47b2ae29236d3d

  • SSDEEP

    1536:qd9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w113:qdseIOMEZEyFjEOFqaiQm5l/5w113

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      5f00bc8c61754ddc2adb4602589278c714f84fc5e6977ff0d0562fc9f81f74afN.exe

    • Size

      76KB

    • MD5

      a8ad3d8ab73c1595dd51afe2bf59b5a0

    • SHA1

      ba1f9e97cee2323267598beca461902afb3fb1cb

    • SHA256

      5f00bc8c61754ddc2adb4602589278c714f84fc5e6977ff0d0562fc9f81f74af

    • SHA512

      42f932316f2ae2a333182980de31b9961defe4629e3140c307e38ecb1862c32a5a8bf621e0b7e2d5e3c806e85ca17e3c822d43e3c01a8f49bf47b2ae29236d3d

    • SSDEEP

      1536:qd9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w113:qdseIOMEZEyFjEOFqaiQm5l/5w113

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks