General

  • Target

    132ad8d2b16ac15f52354135364bec019acbbbbbf3d2c6d98f6aa73eee148655N.exe

  • Size

    76KB

  • Sample

    241230-y9h88sxlhl

  • MD5

    690355737d2f814f310663bba1c6a360

  • SHA1

    74e33198be7097aecf28ba8cac8504fa705ef8ed

  • SHA256

    132ad8d2b16ac15f52354135364bec019acbbbbbf3d2c6d98f6aa73eee148655

  • SHA512

    4ba88aac4f4a493f851e8f7bba4c9366b1fae32e8d9badfbe0456d8703b2b41bb58e5222bc23dd6527ab2d84c0bacdebac38007cafa745a3543cb7d5c6429b5f

  • SSDEEP

    768:AMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAWb:AbIvYvZEyFKF6N4yS+AQmZTl/5Ob

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      132ad8d2b16ac15f52354135364bec019acbbbbbf3d2c6d98f6aa73eee148655N.exe

    • Size

      76KB

    • MD5

      690355737d2f814f310663bba1c6a360

    • SHA1

      74e33198be7097aecf28ba8cac8504fa705ef8ed

    • SHA256

      132ad8d2b16ac15f52354135364bec019acbbbbbf3d2c6d98f6aa73eee148655

    • SHA512

      4ba88aac4f4a493f851e8f7bba4c9366b1fae32e8d9badfbe0456d8703b2b41bb58e5222bc23dd6527ab2d84c0bacdebac38007cafa745a3543cb7d5c6429b5f

    • SSDEEP

      768:AMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAWb:AbIvYvZEyFKF6N4yS+AQmZTl/5Ob

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks