General

  • Target

    fb26c05dacca15ee6c900d931ea4d65c9642cecbead7f334340d550844ad67afN.exe

  • Size

    33KB

  • Sample

    250123-f5gkqsvjgw

  • MD5

    a410c367e098e79280df3a7a9064f9b0

  • SHA1

    fbd14dc76e2b2e7ac73fc710676e598ef4fe8c4b

  • SHA256

    fb26c05dacca15ee6c900d931ea4d65c9642cecbead7f334340d550844ad67af

  • SHA512

    19b713dea81238e9b0155fba001481d6c15406067f442f58724921d8613ffafc7d7f9a6cd862808fe9512f68ae91eb5aceb512176fbb91058527919f013cd3e4

  • SSDEEP

    768:8fVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7Dd:8fVRztyHo8QNHTk0qE5fslvN/956qo

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      fb26c05dacca15ee6c900d931ea4d65c9642cecbead7f334340d550844ad67afN.exe

    • Size

      33KB

    • MD5

      a410c367e098e79280df3a7a9064f9b0

    • SHA1

      fbd14dc76e2b2e7ac73fc710676e598ef4fe8c4b

    • SHA256

      fb26c05dacca15ee6c900d931ea4d65c9642cecbead7f334340d550844ad67af

    • SHA512

      19b713dea81238e9b0155fba001481d6c15406067f442f58724921d8613ffafc7d7f9a6cd862808fe9512f68ae91eb5aceb512176fbb91058527919f013cd3e4

    • SSDEEP

      768:8fVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7Dd:8fVRztyHo8QNHTk0qE5fslvN/956qo

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks