General

  • Target

    9cfdaab58edcca5b8ccd8f35bd2f13198ef19cc2c6572da18cc793734710c942N.exe

  • Size

    71KB

  • Sample

    241231-kxdlbsvqck

  • MD5

    64b0bf70fefe4bf1296961ce787bfbf0

  • SHA1

    289a69ff9545ce549ed89088fc1ff0fa24444a12

  • SHA256

    9cfdaab58edcca5b8ccd8f35bd2f13198ef19cc2c6572da18cc793734710c942

  • SHA512

    be8a610a89b5bf1c3f462378fcddcf85a8ea8f079fc67cf88afc054ecfe7f77301f563218ed64f12a20fc110b9fc3acdae2ed3c61f310342d7766328ce6d6b6b

  • SSDEEP

    1536:Td9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbH:TdseIOMEZEyFjEOFqTiQmQDHIbH

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      9cfdaab58edcca5b8ccd8f35bd2f13198ef19cc2c6572da18cc793734710c942N.exe

    • Size

      71KB

    • MD5

      64b0bf70fefe4bf1296961ce787bfbf0

    • SHA1

      289a69ff9545ce549ed89088fc1ff0fa24444a12

    • SHA256

      9cfdaab58edcca5b8ccd8f35bd2f13198ef19cc2c6572da18cc793734710c942

    • SHA512

      be8a610a89b5bf1c3f462378fcddcf85a8ea8f079fc67cf88afc054ecfe7f77301f563218ed64f12a20fc110b9fc3acdae2ed3c61f310342d7766328ce6d6b6b

    • SSDEEP

      1536:Td9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbH:TdseIOMEZEyFjEOFqTiQmQDHIbH

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks