General

  • Target

    8b8afce48da1552e0d3315b8e9166ec9625504971e2efaa740dee78587b1a1e9N.exe

  • Size

    92KB

  • Sample

    250102-c7bkqaypfy

  • MD5

    c787be34fed9da0b7e0cc61ffb5491b0

  • SHA1

    91a99a52693ae79932866f7e13c28c627669bb53

  • SHA256

    8b8afce48da1552e0d3315b8e9166ec9625504971e2efaa740dee78587b1a1e9

  • SHA512

    5bbf2274912ae12e6191bb4a5434438a5f84cbaf8e06977407a1426de2ac5bb4a1753bcacbe47ee44da183010d3f629b7dae906301bbafbcf1fdc5401c9d7c6b

  • SSDEEP

    1536:Vd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5f:ddseIOyEZEyFjEOFqTiQm5l/5f

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      8b8afce48da1552e0d3315b8e9166ec9625504971e2efaa740dee78587b1a1e9N.exe

    • Size

      92KB

    • MD5

      c787be34fed9da0b7e0cc61ffb5491b0

    • SHA1

      91a99a52693ae79932866f7e13c28c627669bb53

    • SHA256

      8b8afce48da1552e0d3315b8e9166ec9625504971e2efaa740dee78587b1a1e9

    • SHA512

      5bbf2274912ae12e6191bb4a5434438a5f84cbaf8e06977407a1426de2ac5bb4a1753bcacbe47ee44da183010d3f629b7dae906301bbafbcf1fdc5401c9d7c6b

    • SSDEEP

      1536:Vd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5f:ddseIOyEZEyFjEOFqTiQm5l/5f

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks