General

  • Target

    d118c7f77d7c8c66a6ccb603a02cd506480946f4c4ac8e48e136b7935a9e8f9aN.exe

  • Size

    33KB

  • Sample

    250103-t9fe5awngm

  • MD5

    637edd1ab9602251aa5eb253460d0500

  • SHA1

    4cc41715e0ed3622e7f660c08048a520aac99d4e

  • SHA256

    d118c7f77d7c8c66a6ccb603a02cd506480946f4c4ac8e48e136b7935a9e8f9a

  • SHA512

    a3d0086d659f88a7d5753e13a0871cd0160657d6e533e7088f1725aebdbbce4d1b0179f8f9e957f2f82df8a727d9f2c6f6ec52340e1deae60be2efbe4eac17be

  • SSDEEP

    768:jfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7DB:jfVRztyHo8QNHTk0qE5fslvN/956qQ

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      d118c7f77d7c8c66a6ccb603a02cd506480946f4c4ac8e48e136b7935a9e8f9aN.exe

    • Size

      33KB

    • MD5

      637edd1ab9602251aa5eb253460d0500

    • SHA1

      4cc41715e0ed3622e7f660c08048a520aac99d4e

    • SHA256

      d118c7f77d7c8c66a6ccb603a02cd506480946f4c4ac8e48e136b7935a9e8f9a

    • SHA512

      a3d0086d659f88a7d5753e13a0871cd0160657d6e533e7088f1725aebdbbce4d1b0179f8f9e957f2f82df8a727d9f2c6f6ec52340e1deae60be2efbe4eac17be

    • SSDEEP

      768:jfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7DB:jfVRztyHo8QNHTk0qE5fslvN/956qQ

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks