General

  • Target

    a2ea6dee6803ca5b2ba07efa5a11df2776add39c344b176b3cd779cf22d00808.exe

  • Size

    88KB

  • Sample

    241211-ptw1qaxlfq

  • MD5

    49eb23c4378f48dbc96a6f0435bf70a4

  • SHA1

    e2cdd469339b7ba9461f71af8f8fdfeea06cf9ca

  • SHA256

    a2ea6dee6803ca5b2ba07efa5a11df2776add39c344b176b3cd779cf22d00808

  • SHA512

    d16e8e7fd3382a000096dc04c3033c892aff2deb4ef652d89d1e9b99429c3e44eace35f6450a1d071ae6b35711a6fff38ca348897349a5b31410b289a78abe82

  • SSDEEP

    1536:6d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5J:adseIOMEZEyFjEOFqTiQm5l/5J

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      a2ea6dee6803ca5b2ba07efa5a11df2776add39c344b176b3cd779cf22d00808.exe

    • Size

      88KB

    • MD5

      49eb23c4378f48dbc96a6f0435bf70a4

    • SHA1

      e2cdd469339b7ba9461f71af8f8fdfeea06cf9ca

    • SHA256

      a2ea6dee6803ca5b2ba07efa5a11df2776add39c344b176b3cd779cf22d00808

    • SHA512

      d16e8e7fd3382a000096dc04c3033c892aff2deb4ef652d89d1e9b99429c3e44eace35f6450a1d071ae6b35711a6fff38ca348897349a5b31410b289a78abe82

    • SSDEEP

      1536:6d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5J:adseIOMEZEyFjEOFqTiQm5l/5J

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks