General

  • Target

    b76610c7ea0a6b84683c1c68fe15ee58fc6987b84c6c9c1354c88f55105ae8c3N.exe

  • Size

    71KB

  • Sample

    241215-1tg3cazqhj

  • MD5

    9c9f4c915ed4b9b1c5a1b9fbd9ce03d0

  • SHA1

    9b77dd084506bde314014e7219a50e406d2ae947

  • SHA256

    b76610c7ea0a6b84683c1c68fe15ee58fc6987b84c6c9c1354c88f55105ae8c3

  • SHA512

    3f383782f0914228a6d4cd630388b92b46f0884780b2ca4c707253cfc24d72e55ff103c2b97257b02b84dde8aa96cda32fac3bc084fccd28675cc0cb4ee17f2c

  • SSDEEP

    1536:fd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbH:XdseIOMEZEyFjEOFqTiQmQDHIbH

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      b76610c7ea0a6b84683c1c68fe15ee58fc6987b84c6c9c1354c88f55105ae8c3N.exe

    • Size

      71KB

    • MD5

      9c9f4c915ed4b9b1c5a1b9fbd9ce03d0

    • SHA1

      9b77dd084506bde314014e7219a50e406d2ae947

    • SHA256

      b76610c7ea0a6b84683c1c68fe15ee58fc6987b84c6c9c1354c88f55105ae8c3

    • SHA512

      3f383782f0914228a6d4cd630388b92b46f0884780b2ca4c707253cfc24d72e55ff103c2b97257b02b84dde8aa96cda32fac3bc084fccd28675cc0cb4ee17f2c

    • SSDEEP

      1536:fd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbH:XdseIOMEZEyFjEOFqTiQmQDHIbH

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks