General

  • Target

    9095f5790cfcb6f8a987cd3eded39ba47fdf6f76c4e64cef2f675e4d9a9d2077.exe

  • Size

    80KB

  • Sample

    241226-1aq6xa1les

  • MD5

    cc96a448da3ece78d16d94604b43b985

  • SHA1

    424992ddd6f9af348df53e5d084945db032bedee

  • SHA256

    9095f5790cfcb6f8a987cd3eded39ba47fdf6f76c4e64cef2f675e4d9a9d2077

  • SHA512

    a9266a10afceb0456b18b23f171263a77ab80b55c5b9fd631c673fdb0f0ac80eb8d3b2f675e487a76fe47e7bb12a4280b08de78ca4fcbf8d446c153a3e6d8204

  • SSDEEP

    1536:pd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzT:pdseIOMEZEyFjEOFqTiQmOl/5xPvwX

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      9095f5790cfcb6f8a987cd3eded39ba47fdf6f76c4e64cef2f675e4d9a9d2077.exe

    • Size

      80KB

    • MD5

      cc96a448da3ece78d16d94604b43b985

    • SHA1

      424992ddd6f9af348df53e5d084945db032bedee

    • SHA256

      9095f5790cfcb6f8a987cd3eded39ba47fdf6f76c4e64cef2f675e4d9a9d2077

    • SHA512

      a9266a10afceb0456b18b23f171263a77ab80b55c5b9fd631c673fdb0f0ac80eb8d3b2f675e487a76fe47e7bb12a4280b08de78ca4fcbf8d446c153a3e6d8204

    • SSDEEP

      1536:pd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzT:pdseIOMEZEyFjEOFqTiQmOl/5xPvwX

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks