General

  • Target

    d3469837ff9105d7ade82fa1382eb7635ee943afab7634022238cbd07146f6b4N.exe

  • Size

    61KB

  • Sample

    241219-3amjtstkcl

  • MD5

    4e72910783d6d50b3057fb4c867c8a30

  • SHA1

    41e7631e7e2d54e224ddb8aa4d11250037e37fad

  • SHA256

    d3469837ff9105d7ade82fa1382eb7635ee943afab7634022238cbd07146f6b4

  • SHA512

    c528af3f7dff28c1d077ca67f54f6ff1c6585ce2a0f9b36b6cd3777a7ffc2fc000cddb1eb631667c528ab1a53815c9125f9ad94e6faf46e892b1ba5d0dcad653

  • SSDEEP

    1536:Ld9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZOl/5:7dseIOMEZEyFjEOFqTiQmYl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      d3469837ff9105d7ade82fa1382eb7635ee943afab7634022238cbd07146f6b4N.exe

    • Size

      61KB

    • MD5

      4e72910783d6d50b3057fb4c867c8a30

    • SHA1

      41e7631e7e2d54e224ddb8aa4d11250037e37fad

    • SHA256

      d3469837ff9105d7ade82fa1382eb7635ee943afab7634022238cbd07146f6b4

    • SHA512

      c528af3f7dff28c1d077ca67f54f6ff1c6585ce2a0f9b36b6cd3777a7ffc2fc000cddb1eb631667c528ab1a53815c9125f9ad94e6faf46e892b1ba5d0dcad653

    • SSDEEP

      1536:Ld9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZOl/5:7dseIOMEZEyFjEOFqTiQmYl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks