General

  • Target

    dc946334d8af3aa89d01e7a10d4856adaabc34b2c967dbf9f1a1292166f890f7.exe

  • Size

    88KB

  • Sample

    241225-1j4tcsymev

  • MD5

    ed6c1c56b223241e48bb38a0cdd33264

  • SHA1

    ef87d012708914fe10109c7c1fde341c6f7070e6

  • SHA256

    dc946334d8af3aa89d01e7a10d4856adaabc34b2c967dbf9f1a1292166f890f7

  • SHA512

    7b53883d732ba8f3104b69c26e04429ecc0e2b5dc2de546d5443d7a17667f7a9a949b6d5449aeb896e1e23aae923e3dc14661eb4ab64bf4bc804e4bd6ba843b7

  • SSDEEP

    1536:Md9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5h:0dseIOMEZEyFjEOFqTiQm5l/5h

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      dc946334d8af3aa89d01e7a10d4856adaabc34b2c967dbf9f1a1292166f890f7.exe

    • Size

      88KB

    • MD5

      ed6c1c56b223241e48bb38a0cdd33264

    • SHA1

      ef87d012708914fe10109c7c1fde341c6f7070e6

    • SHA256

      dc946334d8af3aa89d01e7a10d4856adaabc34b2c967dbf9f1a1292166f890f7

    • SHA512

      7b53883d732ba8f3104b69c26e04429ecc0e2b5dc2de546d5443d7a17667f7a9a949b6d5449aeb896e1e23aae923e3dc14661eb4ab64bf4bc804e4bd6ba843b7

    • SSDEEP

      1536:Md9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5h:0dseIOMEZEyFjEOFqTiQm5l/5h

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks