General

  • Target

    5777dfcdf4a1aeb13d44e73ceca5cb2f5ccd6472a8bc17f5947cb4037a517b55N.exe

  • Size

    33KB

  • Sample

    250107-vdwmxazlc1

  • MD5

    043c87cf6dfe98c93427a34e7b174a60

  • SHA1

    fcd7af16157e7870fe6895e3eea40b1f5533f9d9

  • SHA256

    5777dfcdf4a1aeb13d44e73ceca5cb2f5ccd6472a8bc17f5947cb4037a517b55

  • SHA512

    0cf64ef8742eea8ae91d991361f8b66d126144b026837a23183c05956cc37a97093a0f28e58edb2b003aad9075fb92a9bea3b88a70072a1d0a495c122125ed78

  • SSDEEP

    768:XfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7D:XfVRztyHo8QNHTk0qE5fslvN/956q

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      5777dfcdf4a1aeb13d44e73ceca5cb2f5ccd6472a8bc17f5947cb4037a517b55N.exe

    • Size

      33KB

    • MD5

      043c87cf6dfe98c93427a34e7b174a60

    • SHA1

      fcd7af16157e7870fe6895e3eea40b1f5533f9d9

    • SHA256

      5777dfcdf4a1aeb13d44e73ceca5cb2f5ccd6472a8bc17f5947cb4037a517b55

    • SHA512

      0cf64ef8742eea8ae91d991361f8b66d126144b026837a23183c05956cc37a97093a0f28e58edb2b003aad9075fb92a9bea3b88a70072a1d0a495c122125ed78

    • SSDEEP

      768:XfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7D:XfVRztyHo8QNHTk0qE5fslvN/956q

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks