General

  • Target

    24e498e6af8fd661096a4172e061efc0a6f239b2e9981d2655aa0f3bb3addcd8N.exe

  • Size

    89KB

  • Sample

    241226-tsk92szrdl

  • MD5

    bbc94aacd015ca2f333cdd6830a88520

  • SHA1

    e70f0f5184d16f9094ddb4826be8f2fe85b0c6e2

  • SHA256

    24e498e6af8fd661096a4172e061efc0a6f239b2e9981d2655aa0f3bb3addcd8

  • SHA512

    2300af48bd6e724b2015c12a05ccbe17383d703a109cae0ff68ef1c42fb0ba3b3921006fe5e7594f7467598fcde76f31e135c8f99efb7dcd14528aa610897f78

  • SSDEEP

    768:V2MEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA1:V2bIvYvZEyFKF6N4yS+AQmZTl/5d

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      24e498e6af8fd661096a4172e061efc0a6f239b2e9981d2655aa0f3bb3addcd8N.exe

    • Size

      89KB

    • MD5

      bbc94aacd015ca2f333cdd6830a88520

    • SHA1

      e70f0f5184d16f9094ddb4826be8f2fe85b0c6e2

    • SHA256

      24e498e6af8fd661096a4172e061efc0a6f239b2e9981d2655aa0f3bb3addcd8

    • SHA512

      2300af48bd6e724b2015c12a05ccbe17383d703a109cae0ff68ef1c42fb0ba3b3921006fe5e7594f7467598fcde76f31e135c8f99efb7dcd14528aa610897f78

    • SSDEEP

      768:V2MEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA1:V2bIvYvZEyFKF6N4yS+AQmZTl/5d

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks