General

  • Target

    2c5e3dd714059961c81f62f787103661aceffb8c04435d699f41e38090cb5a76.exe

  • Size

    90KB

  • Sample

    241125-tck94s1jhj

  • MD5

    7d8abf864e959016909ef1bb03a5283b

  • SHA1

    fef274a39a2396d64bcddc5b72fc8f471091a4ec

  • SHA256

    2c5e3dd714059961c81f62f787103661aceffb8c04435d699f41e38090cb5a76

  • SHA512

    89b73f1b4b6c061fa094c4b9684f583684424c67ad4a6d82b66727b91fb5cd1ca4771fbb11b4dc78d5dacd1457baed020da66f8ad20a08527f40ed399b12e05a

  • SSDEEP

    768:kMEIvFGvZEr8LFK0ic46N4zeSdPAHwmZGp6JXXlaa5uA6:kbIvYvZEyFKF6N4aS5AQmZTl/5C

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      2c5e3dd714059961c81f62f787103661aceffb8c04435d699f41e38090cb5a76.exe

    • Size

      90KB

    • MD5

      7d8abf864e959016909ef1bb03a5283b

    • SHA1

      fef274a39a2396d64bcddc5b72fc8f471091a4ec

    • SHA256

      2c5e3dd714059961c81f62f787103661aceffb8c04435d699f41e38090cb5a76

    • SHA512

      89b73f1b4b6c061fa094c4b9684f583684424c67ad4a6d82b66727b91fb5cd1ca4771fbb11b4dc78d5dacd1457baed020da66f8ad20a08527f40ed399b12e05a

    • SSDEEP

      768:kMEIvFGvZEr8LFK0ic46N4zeSdPAHwmZGp6JXXlaa5uA6:kbIvYvZEyFKF6N4aS5AQmZTl/5C

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks