General

  • Target

    b23c0a605ffc12c091846693ac1a8a41d6cb1a29cea4e5f4b9b6744b3dc18051.exe

  • Size

    76KB

  • Sample

    241231-zlrfda1leq

  • MD5

    1db49f4dbdeb0bb3961f6e1b06ae516b

  • SHA1

    0c139e5e310812636f56024d31fa5d6c88420fec

  • SHA256

    b23c0a605ffc12c091846693ac1a8a41d6cb1a29cea4e5f4b9b6744b3dc18051

  • SHA512

    fa3b5f209f8df73aeeae7ed84a970fef36ad4abe329d53daf92253f65041bbf027631a9522e5d63c3a1baa20487d7148906b0af134c3bc603c8537b9ddf9535a

  • SSDEEP

    768:MMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAWJ:MbIvYvZEyFKF6N4yS+AQmZTl/5OJ

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      b23c0a605ffc12c091846693ac1a8a41d6cb1a29cea4e5f4b9b6744b3dc18051.exe

    • Size

      76KB

    • MD5

      1db49f4dbdeb0bb3961f6e1b06ae516b

    • SHA1

      0c139e5e310812636f56024d31fa5d6c88420fec

    • SHA256

      b23c0a605ffc12c091846693ac1a8a41d6cb1a29cea4e5f4b9b6744b3dc18051

    • SHA512

      fa3b5f209f8df73aeeae7ed84a970fef36ad4abe329d53daf92253f65041bbf027631a9522e5d63c3a1baa20487d7148906b0af134c3bc603c8537b9ddf9535a

    • SSDEEP

      768:MMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAWJ:MbIvYvZEyFKF6N4yS+AQmZTl/5OJ

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks