General

  • Target

    ffae65d1b0b5c9ce209d198d1bc344c2827146f7db3ddf783748dabb37f91b4c.exe

  • Size

    62KB

  • Sample

    241207-ndgenazqds

  • MD5

    339d1aebcf78fcdf377e28218a49804e

  • SHA1

    86857fb61ccd4ab10595e69fe2170bf52b2156fd

  • SHA256

    ffae65d1b0b5c9ce209d198d1bc344c2827146f7db3ddf783748dabb37f91b4c

  • SHA512

    d5b331cab660c9c717a8a26c98522d71f2b305f94931c10f628737e55036262bbe60e2f25267c4ec5690c1eaf813528a1c84da9516e99e82f81294be4d6a6f4e

  • SSDEEP

    768:QMEIvFGvZEr8LFK0ic46N47eSdYAHwmZQp6JXXlaa5uAf:QbIvYvZEyFKF6N4yS+AQmZtl/53

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      ffae65d1b0b5c9ce209d198d1bc344c2827146f7db3ddf783748dabb37f91b4c.exe

    • Size

      62KB

    • MD5

      339d1aebcf78fcdf377e28218a49804e

    • SHA1

      86857fb61ccd4ab10595e69fe2170bf52b2156fd

    • SHA256

      ffae65d1b0b5c9ce209d198d1bc344c2827146f7db3ddf783748dabb37f91b4c

    • SHA512

      d5b331cab660c9c717a8a26c98522d71f2b305f94931c10f628737e55036262bbe60e2f25267c4ec5690c1eaf813528a1c84da9516e99e82f81294be4d6a6f4e

    • SSDEEP

      768:QMEIvFGvZEr8LFK0ic46N47eSdYAHwmZQp6JXXlaa5uAf:QbIvYvZEyFKF6N4yS+AQmZtl/53

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks