General

  • Target

    315953fbb913441159adea85d6d5139b8f633d99b26e28d76b4db2618f69a11d.exe

  • Size

    80KB

  • Sample

    241216-28hg4asraz

  • MD5

    4cac4da6513b2494ea90fea579d6c2a8

  • SHA1

    0edede44656cabc718bc91805f135563d7b6f452

  • SHA256

    315953fbb913441159adea85d6d5139b8f633d99b26e28d76b4db2618f69a11d

  • SHA512

    ec0d57d1baa87dde2cbfa37472dc961980691a278d147f005544e2cfaab710a633fdf01a1f65b169ff06f7faa74a2038343434ff43d23e0259cef5d8abf42144

  • SSDEEP

    1536:Wd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9Xwzr:udseIOMEZEyFjEOFqTiQmOl/5xPvwv

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      315953fbb913441159adea85d6d5139b8f633d99b26e28d76b4db2618f69a11d.exe

    • Size

      80KB

    • MD5

      4cac4da6513b2494ea90fea579d6c2a8

    • SHA1

      0edede44656cabc718bc91805f135563d7b6f452

    • SHA256

      315953fbb913441159adea85d6d5139b8f633d99b26e28d76b4db2618f69a11d

    • SHA512

      ec0d57d1baa87dde2cbfa37472dc961980691a278d147f005544e2cfaab710a633fdf01a1f65b169ff06f7faa74a2038343434ff43d23e0259cef5d8abf42144

    • SSDEEP

      1536:Wd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9Xwzr:udseIOMEZEyFjEOFqTiQmOl/5xPvwv

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks