General

  • Target

    be6c6a8425c78f95f9cc483137fa9a52e18d3457f31a380c65adce720744bc66N.exe

  • Size

    33KB

  • Sample

    241211-q1aazayrej

  • MD5

    89cf0cba306fcc16afb21f84a5a9f7c0

  • SHA1

    4cf3747e5e2388305b5cf740cbc3fe3ddbe73c5c

  • SHA256

    be6c6a8425c78f95f9cc483137fa9a52e18d3457f31a380c65adce720744bc66

  • SHA512

    b3744ce8c59d4db32192cc0904b22715b8ff6c4534b12a186dadecf41ffa2fcabea05b447f504d9b88d79cf19d7c19f47e21e353e3b00eb5fb3f8f6f5052ba92

  • SSDEEP

    768:FfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7DB:FfVRztyHo8QNHTk0qE5fslvN/956qQ

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      be6c6a8425c78f95f9cc483137fa9a52e18d3457f31a380c65adce720744bc66N.exe

    • Size

      33KB

    • MD5

      89cf0cba306fcc16afb21f84a5a9f7c0

    • SHA1

      4cf3747e5e2388305b5cf740cbc3fe3ddbe73c5c

    • SHA256

      be6c6a8425c78f95f9cc483137fa9a52e18d3457f31a380c65adce720744bc66

    • SHA512

      b3744ce8c59d4db32192cc0904b22715b8ff6c4534b12a186dadecf41ffa2fcabea05b447f504d9b88d79cf19d7c19f47e21e353e3b00eb5fb3f8f6f5052ba92

    • SSDEEP

      768:FfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7DB:FfVRztyHo8QNHTk0qE5fslvN/956qQ

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks