General

  • Target

    1e3a4a2d82281040e58098f44797cb310fcc3b808639250e57e038b50f2e1669.exe

  • Size

    71KB

  • Sample

    250107-1c8hza1phj

  • MD5

    04f6650d9b17bcc0c0409cf712c6b0e5

  • SHA1

    7753d3937251fb6b657fae9eb7efe221e3057a5d

  • SHA256

    1e3a4a2d82281040e58098f44797cb310fcc3b808639250e57e038b50f2e1669

  • SHA512

    bc7c7decc774484c3d59513e85e181287efeae2fe2b22ee45b3b85961a03957fb762928e07385d786a71c5945e2b46bccc2f1c574cc1c6ee2a92f18f68b2e564

  • SSDEEP

    1536:fd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbHV:XdseIOMEZEyFjEOFqTiQmQDHIbHV

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      1e3a4a2d82281040e58098f44797cb310fcc3b808639250e57e038b50f2e1669.exe

    • Size

      71KB

    • MD5

      04f6650d9b17bcc0c0409cf712c6b0e5

    • SHA1

      7753d3937251fb6b657fae9eb7efe221e3057a5d

    • SHA256

      1e3a4a2d82281040e58098f44797cb310fcc3b808639250e57e038b50f2e1669

    • SHA512

      bc7c7decc774484c3d59513e85e181287efeae2fe2b22ee45b3b85961a03957fb762928e07385d786a71c5945e2b46bccc2f1c574cc1c6ee2a92f18f68b2e564

    • SSDEEP

      1536:fd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbHV:XdseIOMEZEyFjEOFqTiQmQDHIbHV

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks