General

  • Target

    d0fbe1c9295de98143136948803912ab557427327935cac55138f9326fc80c9aN.exe

  • Size

    80KB

  • Sample

    250116-r8g68awmhj

  • MD5

    fb30f745ff7c2626a18b4391a78b8580

  • SHA1

    a00c4a74b8e347e82409da5f39deb610ca61cabf

  • SHA256

    d0fbe1c9295de98143136948803912ab557427327935cac55138f9326fc80c9a

  • SHA512

    b74006cfe59fa33bdb9cc7b8e7c484d80d0658503385bf592a83a121f9d81b9416654003f4dcd2a0c4087fb23d58257fbfe74136387ec228f11a5bb57a94faf6

  • SSDEEP

    768:/fMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAK:/fbIvYvZEyFKF6N4yS+AQmZTl/5S

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      d0fbe1c9295de98143136948803912ab557427327935cac55138f9326fc80c9aN.exe

    • Size

      80KB

    • MD5

      fb30f745ff7c2626a18b4391a78b8580

    • SHA1

      a00c4a74b8e347e82409da5f39deb610ca61cabf

    • SHA256

      d0fbe1c9295de98143136948803912ab557427327935cac55138f9326fc80c9a

    • SHA512

      b74006cfe59fa33bdb9cc7b8e7c484d80d0658503385bf592a83a121f9d81b9416654003f4dcd2a0c4087fb23d58257fbfe74136387ec228f11a5bb57a94faf6

    • SSDEEP

      768:/fMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAK:/fbIvYvZEyFKF6N4yS+AQmZTl/5S

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks