General

  • Target

    59d924fdd2b4730399536226684506bec34221129bf0fa0295d089b9e5def2adN.exe

  • Size

    80KB

  • Sample

    250108-nncjfsyjbw

  • MD5

    c70b906c7966a01b50d98bb0932f93d0

  • SHA1

    6dce14bbf4a24f0473890e12bdcca47d987627c3

  • SHA256

    59d924fdd2b4730399536226684506bec34221129bf0fa0295d089b9e5def2ad

  • SHA512

    28767323e4126fcf9d9174b31ce98ae4571c97825e6286c170ca77466d0f9d030637fa6974548e79a76f97b28d75d8a56ae78b71e9c451d886cb3be2e29fabd9

  • SSDEEP

    1536:cd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9Xwzb:kdseIOMEZEyFjEOFqTiQmOl/5xPvw/

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      59d924fdd2b4730399536226684506bec34221129bf0fa0295d089b9e5def2adN.exe

    • Size

      80KB

    • MD5

      c70b906c7966a01b50d98bb0932f93d0

    • SHA1

      6dce14bbf4a24f0473890e12bdcca47d987627c3

    • SHA256

      59d924fdd2b4730399536226684506bec34221129bf0fa0295d089b9e5def2ad

    • SHA512

      28767323e4126fcf9d9174b31ce98ae4571c97825e6286c170ca77466d0f9d030637fa6974548e79a76f97b28d75d8a56ae78b71e9c451d886cb3be2e29fabd9

    • SSDEEP

      1536:cd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9Xwzb:kdseIOMEZEyFjEOFqTiQmOl/5xPvw/

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks