General

  • Target

    a290a68132f85a1923664244d7ee9f31dbf888138b6897f6fe4629dbbd0b3091N.exe

  • Size

    65KB

  • Sample

    250116-tcpmjaxnfw

  • MD5

    cec2e18140f848a4bdf3f31242799e90

  • SHA1

    4294a95ade835ac820e932dd61eb68e0afd10f6f

  • SHA256

    a290a68132f85a1923664244d7ee9f31dbf888138b6897f6fe4629dbbd0b3091

  • SHA512

    b7758c24b2329f1468a33c68fe2d1928e058bd035531330fdccfd52517843cabdee5740186c5a5facb64d9976ceb9f2d9bc07bb4fa289bc565ec8bbdc2d2e0af

  • SSDEEP

    1536:Md9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/Hz:0dseIO+EZEyFjEOFqTiQmRHz

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      a290a68132f85a1923664244d7ee9f31dbf888138b6897f6fe4629dbbd0b3091N.exe

    • Size

      65KB

    • MD5

      cec2e18140f848a4bdf3f31242799e90

    • SHA1

      4294a95ade835ac820e932dd61eb68e0afd10f6f

    • SHA256

      a290a68132f85a1923664244d7ee9f31dbf888138b6897f6fe4629dbbd0b3091

    • SHA512

      b7758c24b2329f1468a33c68fe2d1928e058bd035531330fdccfd52517843cabdee5740186c5a5facb64d9976ceb9f2d9bc07bb4fa289bc565ec8bbdc2d2e0af

    • SSDEEP

      1536:Md9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/Hz:0dseIO+EZEyFjEOFqTiQmRHz

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks