General

  • Target

    5aa67f2203ccf1b04a67db62505fde885b481fa662d0886352d7aeecdcfd7e88N.exe

  • Size

    61KB

  • Sample

    241206-zzapsaxncv

  • MD5

    f77c91bfc8f720926802a82b7ae114b0

  • SHA1

    88fd5b96a448959e798021904221b7a3d778f253

  • SHA256

    5aa67f2203ccf1b04a67db62505fde885b481fa662d0886352d7aeecdcfd7e88

  • SHA512

    c349af05ae5d2515be62602a4b566835f740e7e454a963b7883151a22cefce03fa5e65951341a7d0be99fc0bdc0343b9fdb834396eea938f58ae183ddcff7d41

  • SSDEEP

    1536:7d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZnql/5f:LdseIOMEZEyFjEOFqTiQmFql/5f

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      5aa67f2203ccf1b04a67db62505fde885b481fa662d0886352d7aeecdcfd7e88N.exe

    • Size

      61KB

    • MD5

      f77c91bfc8f720926802a82b7ae114b0

    • SHA1

      88fd5b96a448959e798021904221b7a3d778f253

    • SHA256

      5aa67f2203ccf1b04a67db62505fde885b481fa662d0886352d7aeecdcfd7e88

    • SHA512

      c349af05ae5d2515be62602a4b566835f740e7e454a963b7883151a22cefce03fa5e65951341a7d0be99fc0bdc0343b9fdb834396eea938f58ae183ddcff7d41

    • SSDEEP

      1536:7d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZnql/5f:LdseIOMEZEyFjEOFqTiQmFql/5f

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks