General

  • Target

    c90976a89b262ddd5440700747bb1e1830ff8c1d03a9d2b2dc55153b1b482a78N.exe

  • Size

    88KB

  • Sample

    250123-mhxrrsxndn

  • MD5

    e9fc44453f841d897b6e41a344acca00

  • SHA1

    5f54d50d83e0ec1c847b6579e9b787855d1dd34a

  • SHA256

    c90976a89b262ddd5440700747bb1e1830ff8c1d03a9d2b2dc55153b1b482a78

  • SHA512

    62551e67749b6f143613fad524111adcb22bed70648b662438bc139563c085403f8003aa1e2d52e00ef41a78ad2d8ab1dd3433bd80594412dd910cc97f2853d3

  • SSDEEP

    1536:nd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5h:PdseIOMEZEyFjEOFqTiQm5l/5h

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      c90976a89b262ddd5440700747bb1e1830ff8c1d03a9d2b2dc55153b1b482a78N.exe

    • Size

      88KB

    • MD5

      e9fc44453f841d897b6e41a344acca00

    • SHA1

      5f54d50d83e0ec1c847b6579e9b787855d1dd34a

    • SHA256

      c90976a89b262ddd5440700747bb1e1830ff8c1d03a9d2b2dc55153b1b482a78

    • SHA512

      62551e67749b6f143613fad524111adcb22bed70648b662438bc139563c085403f8003aa1e2d52e00ef41a78ad2d8ab1dd3433bd80594412dd910cc97f2853d3

    • SSDEEP

      1536:nd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5h:PdseIOMEZEyFjEOFqTiQm5l/5h

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks