General

  • Target

    8312e8a57f9f80cac147f70643f068772cc8620509337d7fd30a6d41c3a63345.exe

  • Size

    64KB

  • Sample

    241211-mh46vaymgz

  • MD5

    1d905d3fd788fac0e3378e27d7f6c23e

  • SHA1

    3ad24ef474429a940184a11ea45dc8ef6faabe23

  • SHA256

    8312e8a57f9f80cac147f70643f068772cc8620509337d7fd30a6d41c3a63345

  • SHA512

    dd8d7effe7f5acb9b8035b5914f4db305f0dadd348adab7eeed564e33c83069df9cb8bd8bb2392825adccc6962d7b7bea3b7dd6a88e74c93005aff35b1cbb744

  • SSDEEP

    768:4MEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uAN:4bIvYvZEyFKF6N4yS+AQmZcl/51

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      8312e8a57f9f80cac147f70643f068772cc8620509337d7fd30a6d41c3a63345.exe

    • Size

      64KB

    • MD5

      1d905d3fd788fac0e3378e27d7f6c23e

    • SHA1

      3ad24ef474429a940184a11ea45dc8ef6faabe23

    • SHA256

      8312e8a57f9f80cac147f70643f068772cc8620509337d7fd30a6d41c3a63345

    • SHA512

      dd8d7effe7f5acb9b8035b5914f4db305f0dadd348adab7eeed564e33c83069df9cb8bd8bb2392825adccc6962d7b7bea3b7dd6a88e74c93005aff35b1cbb744

    • SSDEEP

      768:4MEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uAN:4bIvYvZEyFKF6N4yS+AQmZcl/51

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks