General

  • Target

    8aaac2fed9e3a219d1790d3bde6ddbe2adf635d9d0ebd219484bca00e78a05ea.exe

  • Size

    89KB

  • Sample

    241226-jrcw6szpet

  • MD5

    f48e5581996ea07ae99fe50c33d70e7c

  • SHA1

    0b043c344c8357b147f9d6d3939df5a31ace50df

  • SHA256

    8aaac2fed9e3a219d1790d3bde6ddbe2adf635d9d0ebd219484bca00e78a05ea

  • SHA512

    2365d344d905d85a93e08d322ff041b8b3f8db7f834b58b8bb26483b71b48bb5fb7d32c76b2d42b8c073a0b5105b596feec8fd867effb493a72a8846de1d93eb

  • SSDEEP

    768:V2MEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA1:V2bIvYvZEyFKF6N4yS+AQmZTl/5d

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      8aaac2fed9e3a219d1790d3bde6ddbe2adf635d9d0ebd219484bca00e78a05ea.exe

    • Size

      89KB

    • MD5

      f48e5581996ea07ae99fe50c33d70e7c

    • SHA1

      0b043c344c8357b147f9d6d3939df5a31ace50df

    • SHA256

      8aaac2fed9e3a219d1790d3bde6ddbe2adf635d9d0ebd219484bca00e78a05ea

    • SHA512

      2365d344d905d85a93e08d322ff041b8b3f8db7f834b58b8bb26483b71b48bb5fb7d32c76b2d42b8c073a0b5105b596feec8fd867effb493a72a8846de1d93eb

    • SSDEEP

      768:V2MEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA1:V2bIvYvZEyFKF6N4yS+AQmZTl/5d

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks