General

  • Target

    d8b2fea6299012d53d989148760223234af6982677f11d92b77cf2e307bd5d1a.exe

  • Size

    92KB

  • Sample

    241226-qgb1fswmfz

  • MD5

    4e4dbc0d7fa4ec586b9c1ec635942faf

  • SHA1

    7977b5c48cb725afa4d7bea9b9bdc0d182c8299f

  • SHA256

    d8b2fea6299012d53d989148760223234af6982677f11d92b77cf2e307bd5d1a

  • SHA512

    08533947db74605344113ebf8ea7f160bf59de80a2f4d12df382495d53f70b0c0e44b87e512c5d433b8c30aed35d4da149808306372cd2bb8325c15812d70121

  • SSDEEP

    1536:sd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5V:UdseIOyEZEyFjEOFqTiQm5l/5V

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      d8b2fea6299012d53d989148760223234af6982677f11d92b77cf2e307bd5d1a.exe

    • Size

      92KB

    • MD5

      4e4dbc0d7fa4ec586b9c1ec635942faf

    • SHA1

      7977b5c48cb725afa4d7bea9b9bdc0d182c8299f

    • SHA256

      d8b2fea6299012d53d989148760223234af6982677f11d92b77cf2e307bd5d1a

    • SHA512

      08533947db74605344113ebf8ea7f160bf59de80a2f4d12df382495d53f70b0c0e44b87e512c5d433b8c30aed35d4da149808306372cd2bb8325c15812d70121

    • SSDEEP

      1536:sd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5V:UdseIOyEZEyFjEOFqTiQm5l/5V

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks