General

  • Target

    8de6f9b770a5b12f471a927ab8d73199b1469221a8d73a42b29c2bd4bcba7ae2.exe

  • Size

    80KB

  • Sample

    250107-b7cbksyjaz

  • MD5

    fd4b4b9bf0ea8788ce2983a134672113

  • SHA1

    75bf364ed59ea1167ee302cdf85453d91ab963a3

  • SHA256

    8de6f9b770a5b12f471a927ab8d73199b1469221a8d73a42b29c2bd4bcba7ae2

  • SHA512

    98cd5d2bc87901673b1e56fdec2d5c82a552c9f91e2b26d62059b740231174dc7e74bd8ada7592cd8103ca01da3a60862b22dd9b6c04d43a41c4ef7dd9c5b211

  • SSDEEP

    768:6fMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAK:6fbIvYvZEyFKF6N4yS+AQmZTl/5S

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      8de6f9b770a5b12f471a927ab8d73199b1469221a8d73a42b29c2bd4bcba7ae2.exe

    • Size

      80KB

    • MD5

      fd4b4b9bf0ea8788ce2983a134672113

    • SHA1

      75bf364ed59ea1167ee302cdf85453d91ab963a3

    • SHA256

      8de6f9b770a5b12f471a927ab8d73199b1469221a8d73a42b29c2bd4bcba7ae2

    • SHA512

      98cd5d2bc87901673b1e56fdec2d5c82a552c9f91e2b26d62059b740231174dc7e74bd8ada7592cd8103ca01da3a60862b22dd9b6c04d43a41c4ef7dd9c5b211

    • SSDEEP

      768:6fMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAK:6fbIvYvZEyFKF6N4yS+AQmZTl/5S

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks