General

  • Target

    5fd393289d24ca3bfd9977cc9f0f2cdd1bef9ec6f5a0789c60864ed9dc0a69e7N.exe

  • Size

    80KB

  • Sample

    241226-fnnmqaxngn

  • MD5

    99014557fca57e87caf8bc0b2d017360

  • SHA1

    ddf4e5972878a2a101a5290acef5da9b285a8c11

  • SHA256

    5fd393289d24ca3bfd9977cc9f0f2cdd1bef9ec6f5a0789c60864ed9dc0a69e7

  • SHA512

    b0aa176a40e9370cd106552ad3994fdf56c34416f0905553d52ff80c03659cae5916bb3113eddb1364d791e4ece4ea076d438ae705c4b916720bd158e6a8735a

  • SSDEEP

    1536:Id9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzJ:4dseIOMEZEyFjEOFqTiQmOl/5xPvwV

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      5fd393289d24ca3bfd9977cc9f0f2cdd1bef9ec6f5a0789c60864ed9dc0a69e7N.exe

    • Size

      80KB

    • MD5

      99014557fca57e87caf8bc0b2d017360

    • SHA1

      ddf4e5972878a2a101a5290acef5da9b285a8c11

    • SHA256

      5fd393289d24ca3bfd9977cc9f0f2cdd1bef9ec6f5a0789c60864ed9dc0a69e7

    • SHA512

      b0aa176a40e9370cd106552ad3994fdf56c34416f0905553d52ff80c03659cae5916bb3113eddb1364d791e4ece4ea076d438ae705c4b916720bd158e6a8735a

    • SSDEEP

      1536:Id9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzJ:4dseIOMEZEyFjEOFqTiQmOl/5xPvwV

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks