General

  • Target

    5cf907c0ffa72b523dc6ce94e687ba97de983577b4e76cd0324a4b893d12b15fN.exe

  • Size

    89KB

  • Sample

    250116-thhq6synem

  • MD5

    4da82766ce647732f535219d482aacd0

  • SHA1

    9bbcbcc011b588d0bced8cfea65780b35d347389

  • SHA256

    5cf907c0ffa72b523dc6ce94e687ba97de983577b4e76cd0324a4b893d12b15f

  • SHA512

    ac57bb6455f9ea1f5f68bb8981591c7b87a82d5fd34f90cf84a92694a4c2532d305407f30b6e3f8150b1db466e6c81540f2d232263251e7210af7b306c023afd

  • SSDEEP

    768:4MEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA1:4bIvYvZEyFKF6N4yS+AQmZTl/5d

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      5cf907c0ffa72b523dc6ce94e687ba97de983577b4e76cd0324a4b893d12b15fN.exe

    • Size

      89KB

    • MD5

      4da82766ce647732f535219d482aacd0

    • SHA1

      9bbcbcc011b588d0bced8cfea65780b35d347389

    • SHA256

      5cf907c0ffa72b523dc6ce94e687ba97de983577b4e76cd0324a4b893d12b15f

    • SHA512

      ac57bb6455f9ea1f5f68bb8981591c7b87a82d5fd34f90cf84a92694a4c2532d305407f30b6e3f8150b1db466e6c81540f2d232263251e7210af7b306c023afd

    • SSDEEP

      768:4MEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA1:4bIvYvZEyFKF6N4yS+AQmZTl/5d

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks