General

  • Target

    49a1bd2bc129adfa4924a07bef3ede610157f9fbf542b4e005375adb25757249N.exe

  • Size

    61KB

  • Sample

    241208-czmysasrak

  • MD5

    169e53955da79b097826d0f8eb991a20

  • SHA1

    a009318f2e100d27a7485c44b6e27a7736c153f1

  • SHA256

    49a1bd2bc129adfa4924a07bef3ede610157f9fbf542b4e005375adb25757249

  • SHA512

    e4bbf2e264ad2b02011dc7d646d9a39cce6a5c1b2202cf96394152b503113af7823d105b1111b9f8e7c81037db00e81017e88a7c0ee8a3b6556034125064f3da

  • SSDEEP

    768:mMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:mbIvYvZEyFKF6N4yS+AQmZTl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      49a1bd2bc129adfa4924a07bef3ede610157f9fbf542b4e005375adb25757249N.exe

    • Size

      61KB

    • MD5

      169e53955da79b097826d0f8eb991a20

    • SHA1

      a009318f2e100d27a7485c44b6e27a7736c153f1

    • SHA256

      49a1bd2bc129adfa4924a07bef3ede610157f9fbf542b4e005375adb25757249

    • SHA512

      e4bbf2e264ad2b02011dc7d646d9a39cce6a5c1b2202cf96394152b503113af7823d105b1111b9f8e7c81037db00e81017e88a7c0ee8a3b6556034125064f3da

    • SSDEEP

      768:mMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:mbIvYvZEyFKF6N4yS+AQmZTl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks