General

  • Target

    c1ed09c4504f234b83540c8002c5676bcd12a4723c2307a88328ff803086de6dN.exe

  • Size

    88KB

  • Sample

    241226-sraw9aynfq

  • MD5

    48891af185479fc1f82a2a9f397a9760

  • SHA1

    ee0a085015948917b5aa163dafe85062d236335d

  • SHA256

    c1ed09c4504f234b83540c8002c5676bcd12a4723c2307a88328ff803086de6d

  • SHA512

    8e1b450a46d8333287f577840d0bc10317f82fe6bfe0875df0f76c3390615ce95eaa486ad21d83eb5847d09671971991100f5c17e84f4ba4641429dfaeba64c4

  • SSDEEP

    1536:Md9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5R:0dseIOMEZEyFjEOFqTiQm5l/5R

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      c1ed09c4504f234b83540c8002c5676bcd12a4723c2307a88328ff803086de6dN.exe

    • Size

      88KB

    • MD5

      48891af185479fc1f82a2a9f397a9760

    • SHA1

      ee0a085015948917b5aa163dafe85062d236335d

    • SHA256

      c1ed09c4504f234b83540c8002c5676bcd12a4723c2307a88328ff803086de6d

    • SHA512

      8e1b450a46d8333287f577840d0bc10317f82fe6bfe0875df0f76c3390615ce95eaa486ad21d83eb5847d09671971991100f5c17e84f4ba4641429dfaeba64c4

    • SSDEEP

      1536:Md9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5R:0dseIOMEZEyFjEOFqTiQm5l/5R

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks