General

  • Target

    6305808fdba57c7bb394d3c97f49df2d2fb73b2449f8d1f9265d5e331cddedf7N.exe

  • Size

    72KB

  • Sample

    250103-x25a3asjdq

  • MD5

    dfd32fa7fff9694bdafb4f39ecf82430

  • SHA1

    8592f7d91c217b97b1a48b80d795302414572870

  • SHA256

    6305808fdba57c7bb394d3c97f49df2d2fb73b2449f8d1f9265d5e331cddedf7

  • SHA512

    c09245e97f1e3533745f86a5376a054fa286e1f1ea8c921e9c557297bbc57b7e54888ce0099c3497cb0320b994f28ab0c1172febaf849a1020651a854469182d

  • SSDEEP

    1536:yd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211X:CdseIOMEZEyFjEOFqTiQm5l/5211X

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      6305808fdba57c7bb394d3c97f49df2d2fb73b2449f8d1f9265d5e331cddedf7N.exe

    • Size

      72KB

    • MD5

      dfd32fa7fff9694bdafb4f39ecf82430

    • SHA1

      8592f7d91c217b97b1a48b80d795302414572870

    • SHA256

      6305808fdba57c7bb394d3c97f49df2d2fb73b2449f8d1f9265d5e331cddedf7

    • SHA512

      c09245e97f1e3533745f86a5376a054fa286e1f1ea8c921e9c557297bbc57b7e54888ce0099c3497cb0320b994f28ab0c1172febaf849a1020651a854469182d

    • SSDEEP

      1536:yd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211X:CdseIOMEZEyFjEOFqTiQm5l/5211X

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks