General

  • Target

    a24136f142634b04177aa281d30adcc99054eee3c733b63a70caba460afcfedcN.exe

  • Size

    72KB

  • Sample

    241210-qwth2s1rgm

  • MD5

    a0bbc4cba4946a0f77b798d443976e60

  • SHA1

    12240b21ce2173981ab7933ebf1e836d3f248205

  • SHA256

    a24136f142634b04177aa281d30adcc99054eee3c733b63a70caba460afcfedc

  • SHA512

    8f895005d8c9acbea9f8c128f7f24189aee20bdeaee45a7e6849bf775e72d7c5ea5ad4418838bbe6e02a0047200c4e7025b0dbe4bd4db4306bacf48bc01c9526

  • SSDEEP

    1536:Bd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211:xdseIOMEZEyFjEOFqTiQm5l/5211

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      a24136f142634b04177aa281d30adcc99054eee3c733b63a70caba460afcfedcN.exe

    • Size

      72KB

    • MD5

      a0bbc4cba4946a0f77b798d443976e60

    • SHA1

      12240b21ce2173981ab7933ebf1e836d3f248205

    • SHA256

      a24136f142634b04177aa281d30adcc99054eee3c733b63a70caba460afcfedc

    • SHA512

      8f895005d8c9acbea9f8c128f7f24189aee20bdeaee45a7e6849bf775e72d7c5ea5ad4418838bbe6e02a0047200c4e7025b0dbe4bd4db4306bacf48bc01c9526

    • SSDEEP

      1536:Bd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211:xdseIOMEZEyFjEOFqTiQm5l/5211

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks