General

  • Target

    3c50148385e01f5bec2879086d969fb93a76f2f4a4fb678b55cae6c38efdd60aN.exe

  • Size

    76KB

  • Sample

    250122-lyqsqa1ndq

  • MD5

    bedb4810e0fdcac907fc66cdd659ab40

  • SHA1

    e14e0d31be41d8c5436d4f1fe1030534d65e1b53

  • SHA256

    3c50148385e01f5bec2879086d969fb93a76f2f4a4fb678b55cae6c38efdd60a

  • SHA512

    c4c791fe7139920df90a9c22b0651d35bc80e0f2829df083f366a9337ec8b2fc706e4fa15955b8b41a54a9aaeb85a61da01ffb6fb59792a496005dda3c917e68

  • SSDEEP

    1536:fd9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w11T:XdseIOMEZEyFjEOFqaiQm5l/5w11T

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      3c50148385e01f5bec2879086d969fb93a76f2f4a4fb678b55cae6c38efdd60aN.exe

    • Size

      76KB

    • MD5

      bedb4810e0fdcac907fc66cdd659ab40

    • SHA1

      e14e0d31be41d8c5436d4f1fe1030534d65e1b53

    • SHA256

      3c50148385e01f5bec2879086d969fb93a76f2f4a4fb678b55cae6c38efdd60a

    • SHA512

      c4c791fe7139920df90a9c22b0651d35bc80e0f2829df083f366a9337ec8b2fc706e4fa15955b8b41a54a9aaeb85a61da01ffb6fb59792a496005dda3c917e68

    • SSDEEP

      1536:fd9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w11T:XdseIOMEZEyFjEOFqaiQm5l/5w11T

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks