General

  • Target

    86696d68a800c1ae54248d11f1247a5e8a4dfba9924b3af7325272b6969b9065N.exe

  • Size

    64KB

  • Sample

    250116-r796lswmgj

  • MD5

    3bda97468b18ba7d2a0c116b281761a0

  • SHA1

    aa1d379911bc389465892ed4df92875c707d3193

  • SHA256

    86696d68a800c1ae54248d11f1247a5e8a4dfba9924b3af7325272b6969b9065

  • SHA512

    f5043927dadd14300a9a8fe412d076183bf0556fc95515afe5d3494d4ddeb7a5063fb60ec88367351a44ea5c1c7f6d75ea6ddd9f71c7d455c94ba327c1861d39

  • SSDEEP

    768:oMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uAN:obIvYvZEyFKF6N4yS+AQmZcl/51

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      86696d68a800c1ae54248d11f1247a5e8a4dfba9924b3af7325272b6969b9065N.exe

    • Size

      64KB

    • MD5

      3bda97468b18ba7d2a0c116b281761a0

    • SHA1

      aa1d379911bc389465892ed4df92875c707d3193

    • SHA256

      86696d68a800c1ae54248d11f1247a5e8a4dfba9924b3af7325272b6969b9065

    • SHA512

      f5043927dadd14300a9a8fe412d076183bf0556fc95515afe5d3494d4ddeb7a5063fb60ec88367351a44ea5c1c7f6d75ea6ddd9f71c7d455c94ba327c1861d39

    • SSDEEP

      768:oMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uAN:obIvYvZEyFKF6N4yS+AQmZcl/51

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks