General

  • Target

    8033a4f67f819651529979ba6e7fcba5e8f517b5dbef4c5cc598a6ec8ea3dbbeN.exe

  • Size

    72KB

  • Sample

    250116-p4h7ls1mfs

  • MD5

    a843ddbe4db478bb7c3404305737eab0

  • SHA1

    2e26eeb05425b4cc5759eef5360b1a0d82d75261

  • SHA256

    8033a4f67f819651529979ba6e7fcba5e8f517b5dbef4c5cc598a6ec8ea3dbbe

  • SHA512

    86530109b85abbe72ece65ddd9f8ba874413975565b16b6d2d52b873a0efb21d6bcefc6dd6f5da154684af01f338ff5c7588fadf063b8359199ca6cc78149860

  • SSDEEP

    1536:7d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211P:LdseIOMEZEyFjEOFqTiQm5l/5211P

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      8033a4f67f819651529979ba6e7fcba5e8f517b5dbef4c5cc598a6ec8ea3dbbeN.exe

    • Size

      72KB

    • MD5

      a843ddbe4db478bb7c3404305737eab0

    • SHA1

      2e26eeb05425b4cc5759eef5360b1a0d82d75261

    • SHA256

      8033a4f67f819651529979ba6e7fcba5e8f517b5dbef4c5cc598a6ec8ea3dbbe

    • SHA512

      86530109b85abbe72ece65ddd9f8ba874413975565b16b6d2d52b873a0efb21d6bcefc6dd6f5da154684af01f338ff5c7588fadf063b8359199ca6cc78149860

    • SSDEEP

      1536:7d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211P:LdseIOMEZEyFjEOFqTiQm5l/5211P

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks