General

  • Target

    7228750f5a6cb070088f78ba50a24c0bb7f9507ab60931826ae5fd8b548d0558.exe

  • Size

    92KB

  • Sample

    250101-x1n8fszjfv

  • MD5

    4784d24e7702d3f138144ebd01378e67

  • SHA1

    19b65f309de690d9768613c75f83c821f76ee969

  • SHA256

    7228750f5a6cb070088f78ba50a24c0bb7f9507ab60931826ae5fd8b548d0558

  • SHA512

    9ad021ef5b624517aadd986df2783bef2edc444a0a17b63423e421bba640c88f3d3bc8040d5ba124ae843e851f9b9090e2cd5d5338e981246e9f72a2672f4150

  • SSDEEP

    1536:Vd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5H:ddseIOyEZEyFjEOFqTiQm5l/5H

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      7228750f5a6cb070088f78ba50a24c0bb7f9507ab60931826ae5fd8b548d0558.exe

    • Size

      92KB

    • MD5

      4784d24e7702d3f138144ebd01378e67

    • SHA1

      19b65f309de690d9768613c75f83c821f76ee969

    • SHA256

      7228750f5a6cb070088f78ba50a24c0bb7f9507ab60931826ae5fd8b548d0558

    • SHA512

      9ad021ef5b624517aadd986df2783bef2edc444a0a17b63423e421bba640c88f3d3bc8040d5ba124ae843e851f9b9090e2cd5d5338e981246e9f72a2672f4150

    • SSDEEP

      1536:Vd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5H:ddseIOyEZEyFjEOFqTiQm5l/5H

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks