General

  • Target

    552cce1d9536b61d5d9adaedabecdc553e4474109b27ef3d7d9537d80c0f3a0aN.exe

  • Size

    90KB

  • Sample

    241207-ay7wfssmar

  • MD5

    3a82eb515db227739dce0ce1e37109f0

  • SHA1

    a703d691e09ed5061f614582ada2ccac721fc937

  • SHA256

    552cce1d9536b61d5d9adaedabecdc553e4474109b27ef3d7d9537d80c0f3a0a

  • SHA512

    18226b297c1370fb4f7ef007509d844c6ca5b0067bed12470e605f0a17238fd93130c3bb90c7096a685c6ed4d7154c0e99b0b33aa79d0b0265b6fc7f615820fa

  • SSDEEP

    768:XMEIvFGvZEr8LFK0ic46N4zeSdPAHwmZGp6JXXlaa5uAe:XbIvYvZEyFKF6N4aS5AQmZTl/52

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      552cce1d9536b61d5d9adaedabecdc553e4474109b27ef3d7d9537d80c0f3a0aN.exe

    • Size

      90KB

    • MD5

      3a82eb515db227739dce0ce1e37109f0

    • SHA1

      a703d691e09ed5061f614582ada2ccac721fc937

    • SHA256

      552cce1d9536b61d5d9adaedabecdc553e4474109b27ef3d7d9537d80c0f3a0a

    • SHA512

      18226b297c1370fb4f7ef007509d844c6ca5b0067bed12470e605f0a17238fd93130c3bb90c7096a685c6ed4d7154c0e99b0b33aa79d0b0265b6fc7f615820fa

    • SSDEEP

      768:XMEIvFGvZEr8LFK0ic46N4zeSdPAHwmZGp6JXXlaa5uAe:XbIvYvZEyFKF6N4aS5AQmZTl/52

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks