General

  • Target

    d2751b13609631a0b85bb9fb27c68e765def682b31ae0a375bd872947a34f653N.exe

  • Size

    65KB

  • Sample

    250104-sp2l7axmaj

  • MD5

    e19a4eb6cfce9d24233437ea72bcc4b0

  • SHA1

    b143d971c9ddde73ec18c347091572efaf610fd2

  • SHA256

    d2751b13609631a0b85bb9fb27c68e765def682b31ae0a375bd872947a34f653

  • SHA512

    2de3c5f0b37cb42fd217ead99f013ffb4743cb588ab4119d9c1c2eec6e9242279ee8dbf651bd86d5dd73a16d336b2c96e6eb47a6d98692699e54ff8548006230

  • SSDEEP

    1536:rd9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/Hz:bdseIO+EZEyFjEOFqTiQmRHz

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      d2751b13609631a0b85bb9fb27c68e765def682b31ae0a375bd872947a34f653N.exe

    • Size

      65KB

    • MD5

      e19a4eb6cfce9d24233437ea72bcc4b0

    • SHA1

      b143d971c9ddde73ec18c347091572efaf610fd2

    • SHA256

      d2751b13609631a0b85bb9fb27c68e765def682b31ae0a375bd872947a34f653

    • SHA512

      2de3c5f0b37cb42fd217ead99f013ffb4743cb588ab4119d9c1c2eec6e9242279ee8dbf651bd86d5dd73a16d336b2c96e6eb47a6d98692699e54ff8548006230

    • SSDEEP

      1536:rd9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/Hz:bdseIO+EZEyFjEOFqTiQmRHz

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks