General

  • Target

    735677d4143d776df89593901f262fbc479aa22bfc80db6ee91b6ec0efa819e3N.exe

  • Size

    90KB

  • Sample

    250104-bbpa9svnbk

  • MD5

    0f4662f4a3e895d04e9545bbb712e8d0

  • SHA1

    32344fe5ff404341298aceae54e1fb5961afb94e

  • SHA256

    735677d4143d776df89593901f262fbc479aa22bfc80db6ee91b6ec0efa819e3

  • SHA512

    6ab8c15638f42a00dd373099ae46baae3e0668e8bc096e573ed4158d2fdb115d003f2245ba02bd1f68489380a822f8549d6b1493dba6b9d5b3b120bd7efe0157

  • SSDEEP

    768:zMEIvFGvZEr8LFK0ic46N4zeSdPAHwmZGp6JXXlaa5uA6:zbIvYvZEyFKF6N4aS5AQmZTl/5C

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      735677d4143d776df89593901f262fbc479aa22bfc80db6ee91b6ec0efa819e3N.exe

    • Size

      90KB

    • MD5

      0f4662f4a3e895d04e9545bbb712e8d0

    • SHA1

      32344fe5ff404341298aceae54e1fb5961afb94e

    • SHA256

      735677d4143d776df89593901f262fbc479aa22bfc80db6ee91b6ec0efa819e3

    • SHA512

      6ab8c15638f42a00dd373099ae46baae3e0668e8bc096e573ed4158d2fdb115d003f2245ba02bd1f68489380a822f8549d6b1493dba6b9d5b3b120bd7efe0157

    • SSDEEP

      768:zMEIvFGvZEr8LFK0ic46N4zeSdPAHwmZGp6JXXlaa5uA6:zbIvYvZEyFKF6N4aS5AQmZTl/5C

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks