General

  • Target

    bcc5af1d8912040b234ba02afbabec27d98236cc6b1e622c3d91f8acefaca54fN.exe

  • Size

    76KB

  • Sample

    241222-a3vrpawpfq

  • MD5

    5b647dd82c1776527855f4d3c60c0b30

  • SHA1

    254557dc05ab9ccad2eb427753ee3942fec0f0d5

  • SHA256

    bcc5af1d8912040b234ba02afbabec27d98236cc6b1e622c3d91f8acefaca54f

  • SHA512

    1094e6878b959ea7a7fd48f2115abb50b8a5215656e6e01edb503ec57e385e935453bb2066def63ba5fca5864e67ad828be5874c1bba92dc206d0281f1e0e17f

  • SSDEEP

    768:XMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAWb:XbIvYvZEyFKF6N4yS+AQmZTl/5Ob

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      bcc5af1d8912040b234ba02afbabec27d98236cc6b1e622c3d91f8acefaca54fN.exe

    • Size

      76KB

    • MD5

      5b647dd82c1776527855f4d3c60c0b30

    • SHA1

      254557dc05ab9ccad2eb427753ee3942fec0f0d5

    • SHA256

      bcc5af1d8912040b234ba02afbabec27d98236cc6b1e622c3d91f8acefaca54f

    • SHA512

      1094e6878b959ea7a7fd48f2115abb50b8a5215656e6e01edb503ec57e385e935453bb2066def63ba5fca5864e67ad828be5874c1bba92dc206d0281f1e0e17f

    • SSDEEP

      768:XMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAWb:XbIvYvZEyFKF6N4yS+AQmZTl/5Ob

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks