General

  • Target

    030f71ee2048d3c343437a7e3c7c8ba254db5360a464ca45a15aca1e5721011f.exe

  • Size

    80KB

  • Sample

    250123-dektcszlhm

  • MD5

    f5c2078a68ff7a7a43e9949440b72a38

  • SHA1

    b79de6391e4d24d33878c3ae63a2cf56f526775b

  • SHA256

    030f71ee2048d3c343437a7e3c7c8ba254db5360a464ca45a15aca1e5721011f

  • SHA512

    217fb9c0ed282060a2ecc2e25d534ebd63e6ab7a0831b992bb429cb1c0dc67b735b4e60e5d898b36a934b1fdf496c85130bac43c671c5b1cd61f012b7ec02d6e

  • SSDEEP

    1536:ed9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9Xwzz:GdseIOMEZEyFjEOFqTiQmOl/5xPvw3

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      030f71ee2048d3c343437a7e3c7c8ba254db5360a464ca45a15aca1e5721011f.exe

    • Size

      80KB

    • MD5

      f5c2078a68ff7a7a43e9949440b72a38

    • SHA1

      b79de6391e4d24d33878c3ae63a2cf56f526775b

    • SHA256

      030f71ee2048d3c343437a7e3c7c8ba254db5360a464ca45a15aca1e5721011f

    • SHA512

      217fb9c0ed282060a2ecc2e25d534ebd63e6ab7a0831b992bb429cb1c0dc67b735b4e60e5d898b36a934b1fdf496c85130bac43c671c5b1cd61f012b7ec02d6e

    • SSDEEP

      1536:ed9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9Xwzz:GdseIOMEZEyFjEOFqTiQmOl/5xPvw3

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks