General

  • Target

    521e179d06bffe53e1e57b820782c0bb7f942d0e71f95a09bc7e77e4a9766c16.exe

  • Size

    61KB

  • Sample

    241221-1z5ets1nhn

  • MD5

    587f1c746ca05559da45ca63829d112d

  • SHA1

    879d27fad040dd1aacfe9ba47ea83bc73316e284

  • SHA256

    521e179d06bffe53e1e57b820782c0bb7f942d0e71f95a09bc7e77e4a9766c16

  • SHA512

    4692c21f0b55a04460245e3caebee339e736b258b3207cdc98c1d6e6fe80e9296fdd143a17bcc73da584a06ac8a6403773cc83a8a220833c10313b1c23f9c08d

  • SSDEEP

    1536:Fd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ4l/5N:tdseIOMEZEyFjEOFqTiQmil/5N

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      521e179d06bffe53e1e57b820782c0bb7f942d0e71f95a09bc7e77e4a9766c16.exe

    • Size

      61KB

    • MD5

      587f1c746ca05559da45ca63829d112d

    • SHA1

      879d27fad040dd1aacfe9ba47ea83bc73316e284

    • SHA256

      521e179d06bffe53e1e57b820782c0bb7f942d0e71f95a09bc7e77e4a9766c16

    • SHA512

      4692c21f0b55a04460245e3caebee339e736b258b3207cdc98c1d6e6fe80e9296fdd143a17bcc73da584a06ac8a6403773cc83a8a220833c10313b1c23f9c08d

    • SSDEEP

      1536:Fd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ4l/5N:tdseIOMEZEyFjEOFqTiQmil/5N

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks