General

  • Target

    44b82d665af546887fb1dfb1854d3790fde12aeba5f15e7ed032a9c4bc551525.exe

  • Size

    76KB

  • Sample

    250122-bh19ea1lck

  • MD5

    adda95e62c0ccaf958a55be967a4464e

  • SHA1

    bd9d2732e8f6ab7bd77b45a177f9c9bf35e10755

  • SHA256

    44b82d665af546887fb1dfb1854d3790fde12aeba5f15e7ed032a9c4bc551525

  • SHA512

    fe3adaf4c5bc70b57ebaf464c29d2674031c0e46e793904d0c857d1b27e55698de63434d9407c29f68559172f1a246bd8e54f4b40653afb5cc6cd50ffde84124

  • SSDEEP

    1536:vd9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w11F:HdseIOMEZEyFjEOFqaiQm5l/5w11F

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      44b82d665af546887fb1dfb1854d3790fde12aeba5f15e7ed032a9c4bc551525.exe

    • Size

      76KB

    • MD5

      adda95e62c0ccaf958a55be967a4464e

    • SHA1

      bd9d2732e8f6ab7bd77b45a177f9c9bf35e10755

    • SHA256

      44b82d665af546887fb1dfb1854d3790fde12aeba5f15e7ed032a9c4bc551525

    • SHA512

      fe3adaf4c5bc70b57ebaf464c29d2674031c0e46e793904d0c857d1b27e55698de63434d9407c29f68559172f1a246bd8e54f4b40653afb5cc6cd50ffde84124

    • SSDEEP

      1536:vd9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w11F:HdseIOMEZEyFjEOFqaiQm5l/5w11F

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks