General

  • Target

    6cd96be378d45285c479c5c778582a5b6e0ec36a75da6fcb8678372efdca9a12N.exe

  • Size

    88KB

  • Sample

    241211-fsrj6sspgn

  • MD5

    ce2ac3c5ed59f6fa25f148e9af05a360

  • SHA1

    c2bdee04ee409b3235d0150c90d66fb1398dbc16

  • SHA256

    6cd96be378d45285c479c5c778582a5b6e0ec36a75da6fcb8678372efdca9a12

  • SHA512

    f12890b9682c707d6fc49d42b3c72108d82710ea0a112a6c5a4aea75438fc9d6da4ad4c44ef6299b860cedcbc87e25e5764d6a3e5594e4cf74ba9c173bdb56f9

  • SSDEEP

    1536:3d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5z:/dseIOMEZEyFjEOFqTiQm5l/5z

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      6cd96be378d45285c479c5c778582a5b6e0ec36a75da6fcb8678372efdca9a12N.exe

    • Size

      88KB

    • MD5

      ce2ac3c5ed59f6fa25f148e9af05a360

    • SHA1

      c2bdee04ee409b3235d0150c90d66fb1398dbc16

    • SHA256

      6cd96be378d45285c479c5c778582a5b6e0ec36a75da6fcb8678372efdca9a12

    • SHA512

      f12890b9682c707d6fc49d42b3c72108d82710ea0a112a6c5a4aea75438fc9d6da4ad4c44ef6299b860cedcbc87e25e5764d6a3e5594e4cf74ba9c173bdb56f9

    • SSDEEP

      1536:3d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5z:/dseIOMEZEyFjEOFqTiQm5l/5z

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks