General

  • Target

    2d7fdb3e9cafb9ead3620b111f374d109a587ac2e9d03392cf79b248bbfc6b5d.exe

  • Size

    72KB

  • Sample

    250119-p4dxwsyjas

  • MD5

    c70ba8999aebb0e1aff0753892cf6d2f

  • SHA1

    f278750c11b8c996ebad4863300f3fe9c266339c

  • SHA256

    2d7fdb3e9cafb9ead3620b111f374d109a587ac2e9d03392cf79b248bbfc6b5d

  • SHA512

    609c0e5ca36102e3effe8f9108af4afd2ded4713a64bf8750da546f97c552456aeba268fae6575b153499acbd098f41586b618ed9f14b03b7804fcce52be37c9

  • SSDEEP

    1536:Vd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211X:ddseIOMEZEyFjEOFqTiQm5l/5211X

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      2d7fdb3e9cafb9ead3620b111f374d109a587ac2e9d03392cf79b248bbfc6b5d.exe

    • Size

      72KB

    • MD5

      c70ba8999aebb0e1aff0753892cf6d2f

    • SHA1

      f278750c11b8c996ebad4863300f3fe9c266339c

    • SHA256

      2d7fdb3e9cafb9ead3620b111f374d109a587ac2e9d03392cf79b248bbfc6b5d

    • SHA512

      609c0e5ca36102e3effe8f9108af4afd2ded4713a64bf8750da546f97c552456aeba268fae6575b153499acbd098f41586b618ed9f14b03b7804fcce52be37c9

    • SSDEEP

      1536:Vd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211X:ddseIOMEZEyFjEOFqTiQm5l/5211X

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks