General

  • Target

    bda801d0d53c5936029edf47f063a60ad71e56642137d173daeae6a60ba9c5c3.exe

  • Size

    62KB

  • Sample

    241211-kp68nszmgp

  • MD5

    e6f29ff7f16171c71bdfd16955855d55

  • SHA1

    9fca109edc006a88a1cc8404622c706ed4025b6b

  • SHA256

    bda801d0d53c5936029edf47f063a60ad71e56642137d173daeae6a60ba9c5c3

  • SHA512

    a3d40e0b7efeda7223599c72b141713fe032ca819e184460ea5b6d74c47fc8aa94b0cc55e59409f604b785c7eb788f5962e6e614be2f897fff17ec602d06aba0

  • SSDEEP

    768:dMEIvFGvZEr8LFK0ic46N47eSdYAHwmZQp6JXXlaa5uA1:dbIvYvZEyFKF6N4yS+AQmZtl/59

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      bda801d0d53c5936029edf47f063a60ad71e56642137d173daeae6a60ba9c5c3.exe

    • Size

      62KB

    • MD5

      e6f29ff7f16171c71bdfd16955855d55

    • SHA1

      9fca109edc006a88a1cc8404622c706ed4025b6b

    • SHA256

      bda801d0d53c5936029edf47f063a60ad71e56642137d173daeae6a60ba9c5c3

    • SHA512

      a3d40e0b7efeda7223599c72b141713fe032ca819e184460ea5b6d74c47fc8aa94b0cc55e59409f604b785c7eb788f5962e6e614be2f897fff17ec602d06aba0

    • SSDEEP

      768:dMEIvFGvZEr8LFK0ic46N47eSdYAHwmZQp6JXXlaa5uA1:dbIvYvZEyFKF6N4yS+AQmZtl/59

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks