General

  • Target

    662ee72b1c477e0ba7cc9ff86da3da7e1df8792d58582519a7f674147814e944.exe

  • Size

    76KB

  • Sample

    250116-r7251awmfj

  • MD5

    4da380879d70fbcf230ed358131d352a

  • SHA1

    02a0535a9e16715dcb4b7ce607fc1de765e3a7ba

  • SHA256

    662ee72b1c477e0ba7cc9ff86da3da7e1df8792d58582519a7f674147814e944

  • SHA512

    56d9188446c96e1da11bf9aa7252796030c4b03c4be9b163ffda30de25587444f6f77658de7054045f356e56cfa6eb68530321f9d15748893d96d9326309c89c

  • SSDEEP

    768:VMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAWb:VbIvYvZEyFKF6N4yS+AQmZTl/5Ob

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      662ee72b1c477e0ba7cc9ff86da3da7e1df8792d58582519a7f674147814e944.exe

    • Size

      76KB

    • MD5

      4da380879d70fbcf230ed358131d352a

    • SHA1

      02a0535a9e16715dcb4b7ce607fc1de765e3a7ba

    • SHA256

      662ee72b1c477e0ba7cc9ff86da3da7e1df8792d58582519a7f674147814e944

    • SHA512

      56d9188446c96e1da11bf9aa7252796030c4b03c4be9b163ffda30de25587444f6f77658de7054045f356e56cfa6eb68530321f9d15748893d96d9326309c89c

    • SSDEEP

      768:VMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAWb:VbIvYvZEyFKF6N4yS+AQmZTl/5Ob

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks