General

  • Target

    dad99339a19205496085a06dfd944cd14ef00811821d5ec056ce2ca1a765a28eN.exe

  • Size

    88KB

  • Sample

    241210-1yzg7a1pay

  • MD5

    76714222c6441571ba89fbd3325efe20

  • SHA1

    1b1d3dc8d2836ddd22e7a4c4c00c4f02deca2a5c

  • SHA256

    dad99339a19205496085a06dfd944cd14ef00811821d5ec056ce2ca1a765a28e

  • SHA512

    049a897eb47be0c385701f42eb6a1d8d58cdb3553237420077d5cf7dbefb67d922ac3276400972947dcd94397074d3f8e3fcb71736c135743a9165b0eace1bb0

  • SSDEEP

    1536:6d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5R:adseIOMEZEyFjEOFqTiQm5l/5R

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      dad99339a19205496085a06dfd944cd14ef00811821d5ec056ce2ca1a765a28eN.exe

    • Size

      88KB

    • MD5

      76714222c6441571ba89fbd3325efe20

    • SHA1

      1b1d3dc8d2836ddd22e7a4c4c00c4f02deca2a5c

    • SHA256

      dad99339a19205496085a06dfd944cd14ef00811821d5ec056ce2ca1a765a28e

    • SHA512

      049a897eb47be0c385701f42eb6a1d8d58cdb3553237420077d5cf7dbefb67d922ac3276400972947dcd94397074d3f8e3fcb71736c135743a9165b0eace1bb0

    • SSDEEP

      1536:6d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5R:adseIOMEZEyFjEOFqTiQm5l/5R

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks