General

  • Target

    24f961313effb974dbc60bb7d0c04a5395ac9da905f0861637e41010dab0ec6a.exe

  • Size

    80KB

  • Sample

    241225-1anqsayjd1

  • MD5

    8ea42c95d5a331082f6de4476a708f11

  • SHA1

    dd49cfc7487f67f3ea275e14166608b2f666cabe

  • SHA256

    24f961313effb974dbc60bb7d0c04a5395ac9da905f0861637e41010dab0ec6a

  • SHA512

    984455b357ec27b20d0ce4a1fd1a6337034f6a5f821ac0059f80828172293ed7c48f66bf782352efb466f5e8bb4dcea8f97af4eaea499e7d77a2ac3737540be2

  • SSDEEP

    768:efMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAe:efbIvYvZEyFKF6N4yS+AQmZTl/5W

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      24f961313effb974dbc60bb7d0c04a5395ac9da905f0861637e41010dab0ec6a.exe

    • Size

      80KB

    • MD5

      8ea42c95d5a331082f6de4476a708f11

    • SHA1

      dd49cfc7487f67f3ea275e14166608b2f666cabe

    • SHA256

      24f961313effb974dbc60bb7d0c04a5395ac9da905f0861637e41010dab0ec6a

    • SHA512

      984455b357ec27b20d0ce4a1fd1a6337034f6a5f821ac0059f80828172293ed7c48f66bf782352efb466f5e8bb4dcea8f97af4eaea499e7d77a2ac3737540be2

    • SSDEEP

      768:efMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAe:efbIvYvZEyFKF6N4yS+AQmZTl/5W

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks