General

  • Target

    05e4eeb2e8b90ccc60db4edbd046fefdfd562626b2d8fd9d5d2fb4c7fc32a688N.exe

  • Size

    76KB

  • Sample

    250116-xj7ngavkfm

  • MD5

    af73dc59f5c9746496cff37edba69c50

  • SHA1

    6c90b661ad79930d25d153ed308223b31dfa6fb9

  • SHA256

    05e4eeb2e8b90ccc60db4edbd046fefdfd562626b2d8fd9d5d2fb4c7fc32a688

  • SHA512

    1ad188fd0165128c3eef7d694fce0b7654674169e8dba9f38103dc8114f0a422e475960179410145d3656cb70103a815c07a3c6e23c313689034f1b8246747de

  • SSDEEP

    768:VMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAWZ:VbIvYvZEyFKF6N4yS+AQmZTl/5OZ

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      05e4eeb2e8b90ccc60db4edbd046fefdfd562626b2d8fd9d5d2fb4c7fc32a688N.exe

    • Size

      76KB

    • MD5

      af73dc59f5c9746496cff37edba69c50

    • SHA1

      6c90b661ad79930d25d153ed308223b31dfa6fb9

    • SHA256

      05e4eeb2e8b90ccc60db4edbd046fefdfd562626b2d8fd9d5d2fb4c7fc32a688

    • SHA512

      1ad188fd0165128c3eef7d694fce0b7654674169e8dba9f38103dc8114f0a422e475960179410145d3656cb70103a815c07a3c6e23c313689034f1b8246747de

    • SSDEEP

      768:VMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAWZ:VbIvYvZEyFKF6N4yS+AQmZTl/5OZ

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks