General

  • Target

    ab7855559df4da13f5dc13771f0fb61467a40f63ef4f11dcde847cf6f31029deN.exe

  • Size

    88KB

  • Sample

    241207-mzqd1svnap

  • MD5

    8013414be0202eea820daad9a47690d0

  • SHA1

    dd16cf45f1271e0e2bf72f47b532adb9e77218f9

  • SHA256

    ab7855559df4da13f5dc13771f0fb61467a40f63ef4f11dcde847cf6f31029de

  • SHA512

    a41ca4617a02c979565225b1c09ef99bdcec0eecd7bc5659273a8d60f6a0252704cbbf0ead39fda66a3d10a0063d5765240676aefb8f0aa5a022ea0118854ac6

  • SSDEEP

    768:xMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:xbIvYvZEyFKF6N4yS+AQmZTl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      ab7855559df4da13f5dc13771f0fb61467a40f63ef4f11dcde847cf6f31029deN.exe

    • Size

      88KB

    • MD5

      8013414be0202eea820daad9a47690d0

    • SHA1

      dd16cf45f1271e0e2bf72f47b532adb9e77218f9

    • SHA256

      ab7855559df4da13f5dc13771f0fb61467a40f63ef4f11dcde847cf6f31029de

    • SHA512

      a41ca4617a02c979565225b1c09ef99bdcec0eecd7bc5659273a8d60f6a0252704cbbf0ead39fda66a3d10a0063d5765240676aefb8f0aa5a022ea0118854ac6

    • SSDEEP

      768:xMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:xbIvYvZEyFKF6N4yS+AQmZTl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks