General

  • Target

    41aa28933ef15f314fbe792409ecf78634bf88ee712b3be5f6fbfebbe437c259N.exe

  • Size

    72KB

  • Sample

    241231-akmncsvram

  • MD5

    c406fea1e86130f0e3c5818d5a9c0e90

  • SHA1

    e6010de19440e71921a4b0ae9ef5a9aae8b87799

  • SHA256

    41aa28933ef15f314fbe792409ecf78634bf88ee712b3be5f6fbfebbe437c259

  • SHA512

    e348e92cd80451a84ce98320e2007462b7bf99a93289e8393142f389138522f43c1711cbf47d39956dbb1114a490095b21a946179c312bfad23f84428e552692

  • SSDEEP

    1536:jd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/52119:DdseIOMEZEyFjEOFqTiQm5l/52119

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      41aa28933ef15f314fbe792409ecf78634bf88ee712b3be5f6fbfebbe437c259N.exe

    • Size

      72KB

    • MD5

      c406fea1e86130f0e3c5818d5a9c0e90

    • SHA1

      e6010de19440e71921a4b0ae9ef5a9aae8b87799

    • SHA256

      41aa28933ef15f314fbe792409ecf78634bf88ee712b3be5f6fbfebbe437c259

    • SHA512

      e348e92cd80451a84ce98320e2007462b7bf99a93289e8393142f389138522f43c1711cbf47d39956dbb1114a490095b21a946179c312bfad23f84428e552692

    • SSDEEP

      1536:jd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/52119:DdseIOMEZEyFjEOFqTiQm5l/52119

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks