General

  • Target

    011dfba13ff74b5dac784c394a342dd204bd708dbcc2d35b808fb985e7efc681.exe

  • Size

    71KB

  • Sample

    241231-jh5wla1mfr

  • MD5

    7ddc1a5c59e68242c7687033f8af05c1

  • SHA1

    643c3a979d53d748afcb2631343693a6a3cf210e

  • SHA256

    011dfba13ff74b5dac784c394a342dd204bd708dbcc2d35b808fb985e7efc681

  • SHA512

    ec5a2dbae1a4715b409bfb892c2227ca9c98eba5a54853c5094e485a2fb09b92115c1b8edd7d4571c26ca1470d3251ce837f1c71e68f9a45ed7d815f4b750580

  • SSDEEP

    1536:Td9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbHf:TdseIOMEZEyFjEOFqTiQmQDHIbHf

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      011dfba13ff74b5dac784c394a342dd204bd708dbcc2d35b808fb985e7efc681.exe

    • Size

      71KB

    • MD5

      7ddc1a5c59e68242c7687033f8af05c1

    • SHA1

      643c3a979d53d748afcb2631343693a6a3cf210e

    • SHA256

      011dfba13ff74b5dac784c394a342dd204bd708dbcc2d35b808fb985e7efc681

    • SHA512

      ec5a2dbae1a4715b409bfb892c2227ca9c98eba5a54853c5094e485a2fb09b92115c1b8edd7d4571c26ca1470d3251ce837f1c71e68f9a45ed7d815f4b750580

    • SSDEEP

      1536:Td9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbHf:TdseIOMEZEyFjEOFqTiQmQDHIbHf

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks