General

  • Target

    f4e89ec29670c1c02e42923d5f2f700825d28dff048ad69e0848d00d0d72d2b0N.exe

  • Size

    90KB

  • Sample

    250108-dpep4a1qfw

  • MD5

    3a8139c50c5539a1bcb271ed8c9b0440

  • SHA1

    a18b0272247e471041f16984b460a0c5a0b32f92

  • SHA256

    f4e89ec29670c1c02e42923d5f2f700825d28dff048ad69e0848d00d0d72d2b0

  • SHA512

    ae3c80ac400fa1d16a7f57fa09bfb7708404dbf2666705c5ce0ee19e5b5c286d3c8f18a846895a0a0961ce5c714dda32aca6cf646e64a8a279b1a00ea09e3bc7

  • SSDEEP

    768:tMEIvFGvZEr8LFK0ic46N4zeSdPAHwmZGp6JXXlaa5uA:tbIvYvZEyFKF6N4aS5AQmZTl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      f4e89ec29670c1c02e42923d5f2f700825d28dff048ad69e0848d00d0d72d2b0N.exe

    • Size

      90KB

    • MD5

      3a8139c50c5539a1bcb271ed8c9b0440

    • SHA1

      a18b0272247e471041f16984b460a0c5a0b32f92

    • SHA256

      f4e89ec29670c1c02e42923d5f2f700825d28dff048ad69e0848d00d0d72d2b0

    • SHA512

      ae3c80ac400fa1d16a7f57fa09bfb7708404dbf2666705c5ce0ee19e5b5c286d3c8f18a846895a0a0961ce5c714dda32aca6cf646e64a8a279b1a00ea09e3bc7

    • SSDEEP

      768:tMEIvFGvZEr8LFK0ic46N4zeSdPAHwmZGp6JXXlaa5uA:tbIvYvZEyFKF6N4aS5AQmZTl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks