General

  • Target

    23ea430d89de77a03cb812438b3a05c2c0883349a20e8c769b91e35774d889a3N.exe

  • Size

    64KB

  • Sample

    250119-snjpzssqgv

  • MD5

    ab660ac97e4215c8a25ab856f9ab8c90

  • SHA1

    d410e8a18338ab2a0b2a3d94bc65de959a69eb8a

  • SHA256

    23ea430d89de77a03cb812438b3a05c2c0883349a20e8c769b91e35774d889a3

  • SHA512

    f1b5539a025b20f0ca76c87b768facc5b0a4a23e73ab97f7e125b2594af0557a80bbbbad8612665f652d4743ef7ef68244d57b3ffb047adfab5f7bf513e042d7

  • SSDEEP

    768:7MEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uAH:7bIvYvZEyFKF6N4yS+AQmZcl/5f

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      23ea430d89de77a03cb812438b3a05c2c0883349a20e8c769b91e35774d889a3N.exe

    • Size

      64KB

    • MD5

      ab660ac97e4215c8a25ab856f9ab8c90

    • SHA1

      d410e8a18338ab2a0b2a3d94bc65de959a69eb8a

    • SHA256

      23ea430d89de77a03cb812438b3a05c2c0883349a20e8c769b91e35774d889a3

    • SHA512

      f1b5539a025b20f0ca76c87b768facc5b0a4a23e73ab97f7e125b2594af0557a80bbbbad8612665f652d4743ef7ef68244d57b3ffb047adfab5f7bf513e042d7

    • SSDEEP

      768:7MEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uAH:7bIvYvZEyFKF6N4yS+AQmZcl/5f

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks