General

  • Target

    3d0346aa72360dbdbc61b36a0ee61c0324de0375c88bfaa4940c415f18f90c8e.exe

  • Size

    76KB

  • Sample

    241216-1ggaaa1kcw

  • MD5

    a4bc7c45722cf2a4f9a6759b885bad6c

  • SHA1

    a7c74bab40d8db95ad9fd9fb30dce5491f257e7f

  • SHA256

    3d0346aa72360dbdbc61b36a0ee61c0324de0375c88bfaa4940c415f18f90c8e

  • SHA512

    17eb0bf4e9e3d13652c9fc0484f50a1477f840199b92715d24bf3b21be0bc670619aa64eff2a6f59fb48d25ae1f3d4abdb2fbc96acfaac247be1f9a91fcd30b1

  • SSDEEP

    768:O2MEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAW7:/bIvYvZEyFKF6N4yS+AQmZTl/5O7

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      3d0346aa72360dbdbc61b36a0ee61c0324de0375c88bfaa4940c415f18f90c8e.exe

    • Size

      76KB

    • MD5

      a4bc7c45722cf2a4f9a6759b885bad6c

    • SHA1

      a7c74bab40d8db95ad9fd9fb30dce5491f257e7f

    • SHA256

      3d0346aa72360dbdbc61b36a0ee61c0324de0375c88bfaa4940c415f18f90c8e

    • SHA512

      17eb0bf4e9e3d13652c9fc0484f50a1477f840199b92715d24bf3b21be0bc670619aa64eff2a6f59fb48d25ae1f3d4abdb2fbc96acfaac247be1f9a91fcd30b1

    • SSDEEP

      768:O2MEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAW7:/bIvYvZEyFKF6N4yS+AQmZTl/5O7

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks