General

  • Target

    bde8958cf92e7fa43d9b96405e605733169a88cdeb7fdafa00d4e3f9ac573faaN.exe

  • Size

    92KB

  • Sample

    241226-cqc28avkfn

  • MD5

    56e1c906484e85cd017c86523997c2c0

  • SHA1

    03515d7daf2de0cd0d086b586d6f549c0c1718f6

  • SHA256

    bde8958cf92e7fa43d9b96405e605733169a88cdeb7fdafa00d4e3f9ac573faa

  • SHA512

    41575b84f49db275a78ebd7f32371b982bb5e0aef349b8d333435322a01491ffc48337bebb563ca340e975eea5601420cb0018389b6803ba23e11d729d5fc739

  • SSDEEP

    1536:sd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5f:UdseIOyEZEyFjEOFqTiQm5l/5f

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      bde8958cf92e7fa43d9b96405e605733169a88cdeb7fdafa00d4e3f9ac573faaN.exe

    • Size

      92KB

    • MD5

      56e1c906484e85cd017c86523997c2c0

    • SHA1

      03515d7daf2de0cd0d086b586d6f549c0c1718f6

    • SHA256

      bde8958cf92e7fa43d9b96405e605733169a88cdeb7fdafa00d4e3f9ac573faa

    • SHA512

      41575b84f49db275a78ebd7f32371b982bb5e0aef349b8d333435322a01491ffc48337bebb563ca340e975eea5601420cb0018389b6803ba23e11d729d5fc739

    • SSDEEP

      1536:sd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5f:UdseIOyEZEyFjEOFqTiQm5l/5f

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks