General

  • Target

    342ce72dae7f771762f11bbf10de036d957a8a7e43558e0a14e032b1cf63095b.exe

  • Size

    33KB

  • Sample

    250122-zanv4stqcs

  • MD5

    36528821f7d49632583ab92778155077

  • SHA1

    1fdc2cdb988e8468309ba684cc6471bb183c6bec

  • SHA256

    342ce72dae7f771762f11bbf10de036d957a8a7e43558e0a14e032b1cf63095b

  • SHA512

    a0d9e713159a6ce43a9e16f0fa325811596a6adb972b93687ab0bd99c0a79180d92c1360abae23c78e9a362444a87de7799cf23a214a6ad1b1fbb1a8b456ed6e

  • SSDEEP

    768:jfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7Dr:jfVRztyHo8QNHTk0qE5fslvN/956qA

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      342ce72dae7f771762f11bbf10de036d957a8a7e43558e0a14e032b1cf63095b.exe

    • Size

      33KB

    • MD5

      36528821f7d49632583ab92778155077

    • SHA1

      1fdc2cdb988e8468309ba684cc6471bb183c6bec

    • SHA256

      342ce72dae7f771762f11bbf10de036d957a8a7e43558e0a14e032b1cf63095b

    • SHA512

      a0d9e713159a6ce43a9e16f0fa325811596a6adb972b93687ab0bd99c0a79180d92c1360abae23c78e9a362444a87de7799cf23a214a6ad1b1fbb1a8b456ed6e

    • SSDEEP

      768:jfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7Dr:jfVRztyHo8QNHTk0qE5fslvN/956qA

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks