General

  • Target

    240dee6da2e284d7cc1628babe7cc0907f4654168f0bc36f1f3b2268be4ee70dN.exe

  • Size

    33KB

  • Sample

    250122-d1tndswkhv

  • MD5

    6b4a87610d7192ec35123b4f22ffa960

  • SHA1

    2e82ed58a2647815bf7c347e428bfd39d75f3e82

  • SHA256

    240dee6da2e284d7cc1628babe7cc0907f4654168f0bc36f1f3b2268be4ee70d

  • SHA512

    b7656415066d4bacfbc9c985330130ce7258b33dfb637f4e97c9d557d33ac3905e9bbaa180c92b03f23c00ef6b3a1155b5c2660aa7aee401ccf01db4c221467f

  • SSDEEP

    768:jfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7DJ:jfVRztyHo8QNHTk0qE5fslvN/956qw

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      240dee6da2e284d7cc1628babe7cc0907f4654168f0bc36f1f3b2268be4ee70dN.exe

    • Size

      33KB

    • MD5

      6b4a87610d7192ec35123b4f22ffa960

    • SHA1

      2e82ed58a2647815bf7c347e428bfd39d75f3e82

    • SHA256

      240dee6da2e284d7cc1628babe7cc0907f4654168f0bc36f1f3b2268be4ee70d

    • SHA512

      b7656415066d4bacfbc9c985330130ce7258b33dfb637f4e97c9d557d33ac3905e9bbaa180c92b03f23c00ef6b3a1155b5c2660aa7aee401ccf01db4c221467f

    • SSDEEP

      768:jfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7DJ:jfVRztyHo8QNHTk0qE5fslvN/956qw

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks