General

  • Target

    ae41ed19ca651c1b720b51906017a5679e4f501f0a0f6e06e2cebb7976e78f88N.exe

  • Size

    92KB

  • Sample

    250103-3hnrvsyqez

  • MD5

    fc6d20184221e54e05c2b331755ed850

  • SHA1

    a8f8a5d37d9598cf08286d55199da6135d6d3f1e

  • SHA256

    ae41ed19ca651c1b720b51906017a5679e4f501f0a0f6e06e2cebb7976e78f88

  • SHA512

    e7eba10f0af0d2e96ef928e91e5497769370446f999783415c6c1e6963591b740dce47a52633511baf03605d11392b13bbf281dac5fe107433268982c892e132

  • SSDEEP

    1536:Pd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5d:ndseIOyEZEyFjEOFqTiQm5l/5d

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      ae41ed19ca651c1b720b51906017a5679e4f501f0a0f6e06e2cebb7976e78f88N.exe

    • Size

      92KB

    • MD5

      fc6d20184221e54e05c2b331755ed850

    • SHA1

      a8f8a5d37d9598cf08286d55199da6135d6d3f1e

    • SHA256

      ae41ed19ca651c1b720b51906017a5679e4f501f0a0f6e06e2cebb7976e78f88

    • SHA512

      e7eba10f0af0d2e96ef928e91e5497769370446f999783415c6c1e6963591b740dce47a52633511baf03605d11392b13bbf281dac5fe107433268982c892e132

    • SSDEEP

      1536:Pd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5d:ndseIOyEZEyFjEOFqTiQm5l/5d

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks