General

  • Target

    5c726ef1537032b8e886b5481a80fab21f41f9b610d82e561853c85409b90e02.exe

  • Size

    76KB

  • Sample

    250122-advemaxqgw

  • MD5

    e625719f383b6b647d52a79ca97e1340

  • SHA1

    c880a72b4edb2318640e08bc3c5d94ce2279280f

  • SHA256

    5c726ef1537032b8e886b5481a80fab21f41f9b610d82e561853c85409b90e02

  • SHA512

    f4e9a93ea055a58973e8adab385e2a01565206bfb657c4dcc36aff8341da27354df94a4bc95f257c988be0bd5cdd2ebf9bd41dc5d4baa92f77a9a5b1f97ecc78

  • SSDEEP

    1536:fd9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w11b:XdseIOMEZEyFjEOFqaiQm5l/5w11b

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      5c726ef1537032b8e886b5481a80fab21f41f9b610d82e561853c85409b90e02.exe

    • Size

      76KB

    • MD5

      e625719f383b6b647d52a79ca97e1340

    • SHA1

      c880a72b4edb2318640e08bc3c5d94ce2279280f

    • SHA256

      5c726ef1537032b8e886b5481a80fab21f41f9b610d82e561853c85409b90e02

    • SHA512

      f4e9a93ea055a58973e8adab385e2a01565206bfb657c4dcc36aff8341da27354df94a4bc95f257c988be0bd5cdd2ebf9bd41dc5d4baa92f77a9a5b1f97ecc78

    • SSDEEP

      1536:fd9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w11b:XdseIOMEZEyFjEOFqaiQm5l/5w11b

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks