General

  • Target

    558419ef8396a3bfc738bb89cda879758893c2835a8f586f0a01a6aefc2836bbN.exe

  • Size

    71KB

  • Sample

    250117-dsh7pazpet

  • MD5

    7ce19ee46b20bc7fa97de6575b57fcd0

  • SHA1

    b81fcd0ba1fc81b2217a225b941af81ec84511a2

  • SHA256

    558419ef8396a3bfc738bb89cda879758893c2835a8f586f0a01a6aefc2836bb

  • SHA512

    1fa6cb702e727ead10bab315b3e91826615c713588a74b06c55ec730410a2c3d61b42688e4e6caf9e5d261f1155616a30061c3ac262c35a0f5174129240b6f2d

  • SSDEEP

    1536:Hd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbH:vdseIOMEZEyFjEOFqTiQmQDHIbH

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      558419ef8396a3bfc738bb89cda879758893c2835a8f586f0a01a6aefc2836bbN.exe

    • Size

      71KB

    • MD5

      7ce19ee46b20bc7fa97de6575b57fcd0

    • SHA1

      b81fcd0ba1fc81b2217a225b941af81ec84511a2

    • SHA256

      558419ef8396a3bfc738bb89cda879758893c2835a8f586f0a01a6aefc2836bb

    • SHA512

      1fa6cb702e727ead10bab315b3e91826615c713588a74b06c55ec730410a2c3d61b42688e4e6caf9e5d261f1155616a30061c3ac262c35a0f5174129240b6f2d

    • SSDEEP

      1536:Hd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbH:vdseIOMEZEyFjEOFqTiQmQDHIbH

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks