General

  • Target

    e5ba58b7eaf078bef1dbd69871bdf44edf22cce79bf88997f90aac04974cf542N.exe

  • Size

    33KB

  • Sample

    250117-a2cjqawnet

  • MD5

    b4a8013875297598e246b5cd6854d620

  • SHA1

    854cd704e40d086dc99f220a62a56160fa6fbc1a

  • SHA256

    e5ba58b7eaf078bef1dbd69871bdf44edf22cce79bf88997f90aac04974cf542

  • SHA512

    1ce62b33bdfa47ee17548a707ba1272c54468b3c2fa3cc898f94a97f34546e6161f5dd6423f84cfed72e056f0dd1c77727fc8025a471b6c1fd8975908a3491ce

  • SSDEEP

    768:LfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7DJ:LfVRztyHo8QNHTk0qE5fslvN/956qw

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      e5ba58b7eaf078bef1dbd69871bdf44edf22cce79bf88997f90aac04974cf542N.exe

    • Size

      33KB

    • MD5

      b4a8013875297598e246b5cd6854d620

    • SHA1

      854cd704e40d086dc99f220a62a56160fa6fbc1a

    • SHA256

      e5ba58b7eaf078bef1dbd69871bdf44edf22cce79bf88997f90aac04974cf542

    • SHA512

      1ce62b33bdfa47ee17548a707ba1272c54468b3c2fa3cc898f94a97f34546e6161f5dd6423f84cfed72e056f0dd1c77727fc8025a471b6c1fd8975908a3491ce

    • SSDEEP

      768:LfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7DJ:LfVRztyHo8QNHTk0qE5fslvN/956qw

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks