General

  • Target

    f0e716f347975cbc3fa7bbc003b44416842e9ed87b19aaf281b2e1171e0ec07f.exe

  • Size

    33KB

  • Sample

    250109-ccqq6avrhp

  • MD5

    d627fd51d8e3fcadec9782fc1ef67f9c

  • SHA1

    c35250b53809f60ef1bdb0f7ef36af3ed2c4d1f9

  • SHA256

    f0e716f347975cbc3fa7bbc003b44416842e9ed87b19aaf281b2e1171e0ec07f

  • SHA512

    a8d1b9e9fad63d5b69b9cc2e21e3dd9adea9c598b2a64b45f76808fe70d2d129af37ac301dabf128895f814abc209796f5d2a2ac91efe727d262ca4546e3cdc0

  • SSDEEP

    768:XfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7Dd:XfVRztyHo8QNHTk0qE5fslvN/956qo

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      f0e716f347975cbc3fa7bbc003b44416842e9ed87b19aaf281b2e1171e0ec07f.exe

    • Size

      33KB

    • MD5

      d627fd51d8e3fcadec9782fc1ef67f9c

    • SHA1

      c35250b53809f60ef1bdb0f7ef36af3ed2c4d1f9

    • SHA256

      f0e716f347975cbc3fa7bbc003b44416842e9ed87b19aaf281b2e1171e0ec07f

    • SHA512

      a8d1b9e9fad63d5b69b9cc2e21e3dd9adea9c598b2a64b45f76808fe70d2d129af37ac301dabf128895f814abc209796f5d2a2ac91efe727d262ca4546e3cdc0

    • SSDEEP

      768:XfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7Dd:XfVRztyHo8QNHTk0qE5fslvN/956qo

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks