General

  • Target

    83e155c128406cebbfff635732a93a702b71f9adcec4c157c36a7a32f2ed97f4.exe

  • Size

    72KB

  • Sample

    241231-b47nbazqe1

  • MD5

    e3caa2b64811f56d18ec442b55783d93

  • SHA1

    25898cde48ad3d96d029b7d16a0110334686b8aa

  • SHA256

    83e155c128406cebbfff635732a93a702b71f9adcec4c157c36a7a32f2ed97f4

  • SHA512

    a4e6274a5d2fdfd7de1e56c35fed12deb9800c8f1e61c57b0024bcd84f9e5bcc0d1f2571d22640efc67fd42f83feb15cfe92e8c39f27a35bd3810525541d7a7a

  • SSDEEP

    1536:jd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211/:DdseIOMEZEyFjEOFqTiQm5l/5211/

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      83e155c128406cebbfff635732a93a702b71f9adcec4c157c36a7a32f2ed97f4.exe

    • Size

      72KB

    • MD5

      e3caa2b64811f56d18ec442b55783d93

    • SHA1

      25898cde48ad3d96d029b7d16a0110334686b8aa

    • SHA256

      83e155c128406cebbfff635732a93a702b71f9adcec4c157c36a7a32f2ed97f4

    • SHA512

      a4e6274a5d2fdfd7de1e56c35fed12deb9800c8f1e61c57b0024bcd84f9e5bcc0d1f2571d22640efc67fd42f83feb15cfe92e8c39f27a35bd3810525541d7a7a

    • SSDEEP

      1536:jd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211/:DdseIOMEZEyFjEOFqTiQm5l/5211/

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks