General

  • Target

    7dc80c1ae1a5e49a0b1269a03d62ff6677f3c0973f85b16509c358c9821e6964.exe

  • Size

    90KB

  • Sample

    250101-aql9sazlcq

  • MD5

    1ae4087e15eb5000df50db515ff79745

  • SHA1

    66d074bbdf7712d24d5e58e5e73b45eb5013bf46

  • SHA256

    7dc80c1ae1a5e49a0b1269a03d62ff6677f3c0973f85b16509c358c9821e6964

  • SHA512

    a290cc9f8d72b1c3ad66022f5f767a21750c37a7b5e7996ab292add17a311908b8093de84df9358a570bfeb50571d9996759ee12c24aab92db646c242c3d7a76

  • SSDEEP

    768:qMEIvFGvZEr8LFK0ic46N4zeSdPAHwmZGp6JXXlaa5uAu:qbIvYvZEyFKF6N4aS5AQmZTl/5m

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      7dc80c1ae1a5e49a0b1269a03d62ff6677f3c0973f85b16509c358c9821e6964.exe

    • Size

      90KB

    • MD5

      1ae4087e15eb5000df50db515ff79745

    • SHA1

      66d074bbdf7712d24d5e58e5e73b45eb5013bf46

    • SHA256

      7dc80c1ae1a5e49a0b1269a03d62ff6677f3c0973f85b16509c358c9821e6964

    • SHA512

      a290cc9f8d72b1c3ad66022f5f767a21750c37a7b5e7996ab292add17a311908b8093de84df9358a570bfeb50571d9996759ee12c24aab92db646c242c3d7a76

    • SSDEEP

      768:qMEIvFGvZEr8LFK0ic46N4zeSdPAHwmZGp6JXXlaa5uAu:qbIvYvZEyFKF6N4aS5AQmZTl/5m

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks