General

  • Target

    e8ec10d0158b89112a1d9de0fd81ca0a8f36d83ee46286755d0f8cc7073599c5N.exe

  • Size

    80KB

  • Sample

    241217-k8jxgswrgn

  • MD5

    b0957e5c9f6d968a760770b1fc07de70

  • SHA1

    bfa31c35bcf1858fcdf8ae02d8e7b5b0efe276b6

  • SHA256

    e8ec10d0158b89112a1d9de0fd81ca0a8f36d83ee46286755d0f8cc7073599c5

  • SHA512

    214e2ac4521ff8991841c9f028075565a79957052f5e1a0b0d5f45de2c8427c5ed79def4eaff1850ef052505e849bca933b2f715dea21b50cb5993302b50ad47

  • SSDEEP

    1536:Wd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9Xwzz:udseIOMEZEyFjEOFqTiQmOl/5xPvw3

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      e8ec10d0158b89112a1d9de0fd81ca0a8f36d83ee46286755d0f8cc7073599c5N.exe

    • Size

      80KB

    • MD5

      b0957e5c9f6d968a760770b1fc07de70

    • SHA1

      bfa31c35bcf1858fcdf8ae02d8e7b5b0efe276b6

    • SHA256

      e8ec10d0158b89112a1d9de0fd81ca0a8f36d83ee46286755d0f8cc7073599c5

    • SHA512

      214e2ac4521ff8991841c9f028075565a79957052f5e1a0b0d5f45de2c8427c5ed79def4eaff1850ef052505e849bca933b2f715dea21b50cb5993302b50ad47

    • SSDEEP

      1536:Wd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9Xwzz:udseIOMEZEyFjEOFqTiQmOl/5xPvw3

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks