General

  • Target

    51029ec6fc57e258119fc773649dadb30137b64ef9b30ab11fdbeeff5383de26N.exe

  • Size

    76KB

  • Sample

    241208-cpw4pssldk

  • MD5

    ac6aaaabc173bd895004e09a05dafd90

  • SHA1

    7c347e6d13b37e1f416e8770beb5da59a06c66fe

  • SHA256

    51029ec6fc57e258119fc773649dadb30137b64ef9b30ab11fdbeeff5383de26

  • SHA512

    0efcda78a2ccecee99b1a2fc5033e1e0c69774b64ed222feb8b9003ee5b60b3e808764924a8be0d9fbee887001273ced6467199e696408ea7fc136b0ba3f7be6

  • SSDEEP

    768:fMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAW:fbIvYvZEyFKF6N4yS+AQmZTl/5O

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      51029ec6fc57e258119fc773649dadb30137b64ef9b30ab11fdbeeff5383de26N.exe

    • Size

      76KB

    • MD5

      ac6aaaabc173bd895004e09a05dafd90

    • SHA1

      7c347e6d13b37e1f416e8770beb5da59a06c66fe

    • SHA256

      51029ec6fc57e258119fc773649dadb30137b64ef9b30ab11fdbeeff5383de26

    • SHA512

      0efcda78a2ccecee99b1a2fc5033e1e0c69774b64ed222feb8b9003ee5b60b3e808764924a8be0d9fbee887001273ced6467199e696408ea7fc136b0ba3f7be6

    • SSDEEP

      768:fMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAW:fbIvYvZEyFKF6N4yS+AQmZTl/5O

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks