General

  • Target

    ff1c9ae7af4c7c0b20662f8ab118caefbc35c2efb3eba769cc504c2574195335N.exe

  • Size

    88KB

  • Sample

    241226-1krv7a1qen

  • MD5

    8e1a22da248cd2516919fc1bacf92de0

  • SHA1

    575a3ab9be9678886265cd35d24c3544eceec33f

  • SHA256

    ff1c9ae7af4c7c0b20662f8ab118caefbc35c2efb3eba769cc504c2574195335

  • SHA512

    74b96ac89b30e54d903610298244f29e260f839f04a55836cc550d54c178c424e4a137401b278eeb803c46216668778941e2ad6df50e1de7999bff5b49e99e1c

  • SSDEEP

    1536:Qd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5R:QdseIOMEZEyFjEOFqTiQm5l/5R

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      ff1c9ae7af4c7c0b20662f8ab118caefbc35c2efb3eba769cc504c2574195335N.exe

    • Size

      88KB

    • MD5

      8e1a22da248cd2516919fc1bacf92de0

    • SHA1

      575a3ab9be9678886265cd35d24c3544eceec33f

    • SHA256

      ff1c9ae7af4c7c0b20662f8ab118caefbc35c2efb3eba769cc504c2574195335

    • SHA512

      74b96ac89b30e54d903610298244f29e260f839f04a55836cc550d54c178c424e4a137401b278eeb803c46216668778941e2ad6df50e1de7999bff5b49e99e1c

    • SSDEEP

      1536:Qd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5R:QdseIOMEZEyFjEOFqTiQm5l/5R

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks