General

  • Target

    2ba064a25b752dc514cd91bfb7cfa8daf67903cc9e10ecf45217521c7329a501N.exe

  • Size

    72KB

  • Sample

    250107-asrmaaxndn

  • MD5

    5c12566295f602c03c2318bcdc536760

  • SHA1

    84fe4be77d660a51cb092c658ef0405657b39a42

  • SHA256

    2ba064a25b752dc514cd91bfb7cfa8daf67903cc9e10ecf45217521c7329a501

  • SHA512

    a533c773df89d316cd81b3df90de69e5149acde7db032bb0557dd3eff462ee7e8db3cd4ce073aa761918f568fe949ca06daf2dc41ce6b5513b855c513a2916b3

  • SSDEEP

    1536:Kd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/52119:KdseIOMEZEyFjEOFqTiQm5l/52119

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      2ba064a25b752dc514cd91bfb7cfa8daf67903cc9e10ecf45217521c7329a501N.exe

    • Size

      72KB

    • MD5

      5c12566295f602c03c2318bcdc536760

    • SHA1

      84fe4be77d660a51cb092c658ef0405657b39a42

    • SHA256

      2ba064a25b752dc514cd91bfb7cfa8daf67903cc9e10ecf45217521c7329a501

    • SHA512

      a533c773df89d316cd81b3df90de69e5149acde7db032bb0557dd3eff462ee7e8db3cd4ce073aa761918f568fe949ca06daf2dc41ce6b5513b855c513a2916b3

    • SSDEEP

      1536:Kd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/52119:KdseIOMEZEyFjEOFqTiQm5l/52119

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks