General

  • Target

    958ec3fb87126ca4ed9bf1a920231d345682456c5dc084b235fb23a04893b5beN.exe

  • Size

    80KB

  • Sample

    250108-3d9tjazrbm

  • MD5

    d7ee3342e8fb2ff91b43d8273eb65f00

  • SHA1

    b274578007da1aba93a09eb6332e2f9803bc3cb1

  • SHA256

    958ec3fb87126ca4ed9bf1a920231d345682456c5dc084b235fb23a04893b5be

  • SHA512

    b98f73b23aeb657ae774a66a4f76a4cb8682f2f9a13c3c830cb536eb9955bebb8e097dbdc6be4e596094400bf5cbd04589882399612b79e35e18ebc41dbb3b5b

  • SSDEEP

    768:6fMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAK:6fbIvYvZEyFKF6N4yS+AQmZTl/5S

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      958ec3fb87126ca4ed9bf1a920231d345682456c5dc084b235fb23a04893b5beN.exe

    • Size

      80KB

    • MD5

      d7ee3342e8fb2ff91b43d8273eb65f00

    • SHA1

      b274578007da1aba93a09eb6332e2f9803bc3cb1

    • SHA256

      958ec3fb87126ca4ed9bf1a920231d345682456c5dc084b235fb23a04893b5be

    • SHA512

      b98f73b23aeb657ae774a66a4f76a4cb8682f2f9a13c3c830cb536eb9955bebb8e097dbdc6be4e596094400bf5cbd04589882399612b79e35e18ebc41dbb3b5b

    • SSDEEP

      768:6fMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAK:6fbIvYvZEyFKF6N4yS+AQmZTl/5S

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks