General

  • Target

    8d60efdab6c707b2bae933f9d17a453e9bb0070ff19a95dbf7535a8405c9888c.exe

  • Size

    65KB

  • Sample

    241226-rjbcdaxles

  • MD5

    ed316f4bc5b73500ba04a43da4fe8a68

  • SHA1

    43be5deea5f422feb74555055185d40dd5f06b70

  • SHA256

    8d60efdab6c707b2bae933f9d17a453e9bb0070ff19a95dbf7535a8405c9888c

  • SHA512

    1544f38cd0fd69bf5af6ccc363cf0eaff45be269f030627e09b5669bae1ba7398339198148a9b693143513823c5300d93faef7c38c4cc64e05df724ffda55813

  • SSDEEP

    1536:ad9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/Hz3:6dseIO+EZEyFjEOFqTiQmRHz3

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      8d60efdab6c707b2bae933f9d17a453e9bb0070ff19a95dbf7535a8405c9888c.exe

    • Size

      65KB

    • MD5

      ed316f4bc5b73500ba04a43da4fe8a68

    • SHA1

      43be5deea5f422feb74555055185d40dd5f06b70

    • SHA256

      8d60efdab6c707b2bae933f9d17a453e9bb0070ff19a95dbf7535a8405c9888c

    • SHA512

      1544f38cd0fd69bf5af6ccc363cf0eaff45be269f030627e09b5669bae1ba7398339198148a9b693143513823c5300d93faef7c38c4cc64e05df724ffda55813

    • SSDEEP

      1536:ad9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/Hz3:6dseIO+EZEyFjEOFqTiQmRHz3

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks