General

  • Target

    d8d7683a26729d1fe62e5796a0815d53b7d147a18ad36e07409836024137b6b9N.exe

  • Size

    80KB

  • Sample

    241225-y43exswlhw

  • MD5

    49c76a7a1ea459734125a3b2f70b6c40

  • SHA1

    2eabb00bdbea6f9b6e1e5fd86bd905de0e12dc61

  • SHA256

    d8d7683a26729d1fe62e5796a0815d53b7d147a18ad36e07409836024137b6b9

  • SHA512

    2e74e18e163098125b5c29323d5d7c1c4745ab763655bdc0e82849544111a36b42e360f0bad6c47a6b306fc09d5a4de30f00e19a422de7d0140d4311b160788d

  • SSDEEP

    768:efMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA6:efbIvYvZEyFKF6N4yS+AQmZTl/5i

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      d8d7683a26729d1fe62e5796a0815d53b7d147a18ad36e07409836024137b6b9N.exe

    • Size

      80KB

    • MD5

      49c76a7a1ea459734125a3b2f70b6c40

    • SHA1

      2eabb00bdbea6f9b6e1e5fd86bd905de0e12dc61

    • SHA256

      d8d7683a26729d1fe62e5796a0815d53b7d147a18ad36e07409836024137b6b9

    • SHA512

      2e74e18e163098125b5c29323d5d7c1c4745ab763655bdc0e82849544111a36b42e360f0bad6c47a6b306fc09d5a4de30f00e19a422de7d0140d4311b160788d

    • SSDEEP

      768:efMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA6:efbIvYvZEyFKF6N4yS+AQmZTl/5i

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks