General

  • Target

    3c5c60383def85b22e747d35915ba32c9c63b20eb0b9360464be48d9f0313574N.exe

  • Size

    89KB

  • Sample

    241218-ex6dfstrbq

  • MD5

    2920d9e395a954b8d7efb98ab09d2200

  • SHA1

    5103f927c8ff15d870aeee9a1315355d22b3a358

  • SHA256

    3c5c60383def85b22e747d35915ba32c9c63b20eb0b9360464be48d9f0313574

  • SHA512

    c7ec44c077d5f09ca815670bc691de3eadb8437e2aef405aa25d6989d58e3661c723ac4ef4d5796c029d5afee170e5fa2b09ab38bc357971899d929900d50b47

  • SSDEEP

    768:DMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA1:DbIvYvZEyFKF6N4yS+AQmZTl/5d

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      3c5c60383def85b22e747d35915ba32c9c63b20eb0b9360464be48d9f0313574N.exe

    • Size

      89KB

    • MD5

      2920d9e395a954b8d7efb98ab09d2200

    • SHA1

      5103f927c8ff15d870aeee9a1315355d22b3a358

    • SHA256

      3c5c60383def85b22e747d35915ba32c9c63b20eb0b9360464be48d9f0313574

    • SHA512

      c7ec44c077d5f09ca815670bc691de3eadb8437e2aef405aa25d6989d58e3661c723ac4ef4d5796c029d5afee170e5fa2b09ab38bc357971899d929900d50b47

    • SSDEEP

      768:DMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA1:DbIvYvZEyFKF6N4yS+AQmZTl/5d

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks