General

  • Target

    f05d38f591adb596fc1c2e257be265bb3e458d4ebf0b60920ec2558343cadc22N.exe

  • Size

    89KB

  • Sample

    250102-e14c9stjb1

  • MD5

    953b5dcbee95440d38892ee7f4c84e50

  • SHA1

    bad61f40f24102dc184116dbe839547816ba020f

  • SHA256

    f05d38f591adb596fc1c2e257be265bb3e458d4ebf0b60920ec2558343cadc22

  • SHA512

    5e9ffe005d1e3e383d9a6fc1b9892d734bd7a6ecc38b983a2136aed43aab1a0f754e277b1b66876056925fdd6b584b545ccddb5a0fe9bc1ac7b2b1a89becd0c4

  • SSDEEP

    768:FMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAV:FbIvYvZEyFKF6N4yS+AQmZTl/59

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      f05d38f591adb596fc1c2e257be265bb3e458d4ebf0b60920ec2558343cadc22N.exe

    • Size

      89KB

    • MD5

      953b5dcbee95440d38892ee7f4c84e50

    • SHA1

      bad61f40f24102dc184116dbe839547816ba020f

    • SHA256

      f05d38f591adb596fc1c2e257be265bb3e458d4ebf0b60920ec2558343cadc22

    • SHA512

      5e9ffe005d1e3e383d9a6fc1b9892d734bd7a6ecc38b983a2136aed43aab1a0f754e277b1b66876056925fdd6b584b545ccddb5a0fe9bc1ac7b2b1a89becd0c4

    • SSDEEP

      768:FMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAV:FbIvYvZEyFKF6N4yS+AQmZTl/59

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks