General

  • Target

    9bb28f92a2bea31b35442f427e6ef58b8cfa60cf27a2e67939449a1f27d86210N.exe

  • Size

    61KB

  • Sample

    250112-j92cgswrap

  • MD5

    26c37b97ce88d2b4baf9507d82ba4730

  • SHA1

    89e887acdf20815186546d8e33ebf313787e0216

  • SHA256

    9bb28f92a2bea31b35442f427e6ef58b8cfa60cf27a2e67939449a1f27d86210

  • SHA512

    e38e37c095a1167842fef207a24846f57791abf51d065e72bae6605775ff1159df079d1c95b407e69fb0e5e9334abf16c84de6d40ae3e84a39ab659cc2151efc

  • SSDEEP

    1536:md9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZxl/5:edseIOMEZEyFjEOFqTiQmTl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      9bb28f92a2bea31b35442f427e6ef58b8cfa60cf27a2e67939449a1f27d86210N.exe

    • Size

      61KB

    • MD5

      26c37b97ce88d2b4baf9507d82ba4730

    • SHA1

      89e887acdf20815186546d8e33ebf313787e0216

    • SHA256

      9bb28f92a2bea31b35442f427e6ef58b8cfa60cf27a2e67939449a1f27d86210

    • SHA512

      e38e37c095a1167842fef207a24846f57791abf51d065e72bae6605775ff1159df079d1c95b407e69fb0e5e9334abf16c84de6d40ae3e84a39ab659cc2151efc

    • SSDEEP

      1536:md9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZxl/5:edseIOMEZEyFjEOFqTiQmTl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks