General

  • Target

    2989d1d879a087cd860f0ba544267551a1a99b91f961258876518567bdfbfbea.exe

  • Size

    76KB

  • Sample

    250115-1x9xjawpgw

  • MD5

    6351bf0b2c857a252d51c3442c498476

  • SHA1

    684e30fb9169d36080114ae44ece8e9d206675a1

  • SHA256

    2989d1d879a087cd860f0ba544267551a1a99b91f961258876518567bdfbfbea

  • SHA512

    9ceea7634d447cfa772d744cee31d38b74697d12e44308027bd4eda508887e7c73807e112c90caaae31a9b21a2c7bae7935d203ed12b0b66e012d357b7ded083

  • SSDEEP

    1536:5d9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w11J:ZdseIOMEZEyFjEOFqaiQm5l/5w11J

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      2989d1d879a087cd860f0ba544267551a1a99b91f961258876518567bdfbfbea.exe

    • Size

      76KB

    • MD5

      6351bf0b2c857a252d51c3442c498476

    • SHA1

      684e30fb9169d36080114ae44ece8e9d206675a1

    • SHA256

      2989d1d879a087cd860f0ba544267551a1a99b91f961258876518567bdfbfbea

    • SHA512

      9ceea7634d447cfa772d744cee31d38b74697d12e44308027bd4eda508887e7c73807e112c90caaae31a9b21a2c7bae7935d203ed12b0b66e012d357b7ded083

    • SSDEEP

      1536:5d9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w11J:ZdseIOMEZEyFjEOFqaiQm5l/5w11J

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks