General

  • Target

    eab27175133c089656aac5da13dca473893cb19d716ad9dd38fa418c006c432eN.exe

  • Size

    33KB

  • Sample

    250123-2hfwksykdk

  • MD5

    2afbf5ef5dbe767a28fc8701c5de7180

  • SHA1

    975711a9549ee7116a47938a5d114915ceeddd97

  • SHA256

    eab27175133c089656aac5da13dca473893cb19d716ad9dd38fa418c006c432e

  • SHA512

    f221de6a18771b8cc25d4109132a7426f1efa08e1b5d62b7dafcfd1ad50a3015d290dd4bac64d062c125f87273550d01ad4649d19cca850938800f77ea5fd674

  • SSDEEP

    768:afVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7D:afVRztyHo8QNHTk0qE5fslvN/956q

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      eab27175133c089656aac5da13dca473893cb19d716ad9dd38fa418c006c432eN.exe

    • Size

      33KB

    • MD5

      2afbf5ef5dbe767a28fc8701c5de7180

    • SHA1

      975711a9549ee7116a47938a5d114915ceeddd97

    • SHA256

      eab27175133c089656aac5da13dca473893cb19d716ad9dd38fa418c006c432e

    • SHA512

      f221de6a18771b8cc25d4109132a7426f1efa08e1b5d62b7dafcfd1ad50a3015d290dd4bac64d062c125f87273550d01ad4649d19cca850938800f77ea5fd674

    • SSDEEP

      768:afVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7D:afVRztyHo8QNHTk0qE5fslvN/956q

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks