General

  • Target

    f55fb86596d19f910733201602a18331b962ede7ef1a7ff118ee487c4c15b72a.exe

  • Size

    80KB

  • Sample

    250124-c381esvqhs

  • MD5

    ad4435bb25f4a761455cf19cbf6b59cb

  • SHA1

    249e6d126522149a5b5d6c2fa1c788fed38943e0

  • SHA256

    f55fb86596d19f910733201602a18331b962ede7ef1a7ff118ee487c4c15b72a

  • SHA512

    d9f9229dcbf3bc5149028280a0c764538225bb9e83a3f52402def65293b2d2802b6eb8b859fe2487113b03662d323455a52f74bff50040ff59c382ccaa5dff0b

  • SSDEEP

    1536:wd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9Xwzp:wdseIOMEZEyFjEOFqTiQmOl/5xPvw1

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      f55fb86596d19f910733201602a18331b962ede7ef1a7ff118ee487c4c15b72a.exe

    • Size

      80KB

    • MD5

      ad4435bb25f4a761455cf19cbf6b59cb

    • SHA1

      249e6d126522149a5b5d6c2fa1c788fed38943e0

    • SHA256

      f55fb86596d19f910733201602a18331b962ede7ef1a7ff118ee487c4c15b72a

    • SHA512

      d9f9229dcbf3bc5149028280a0c764538225bb9e83a3f52402def65293b2d2802b6eb8b859fe2487113b03662d323455a52f74bff50040ff59c382ccaa5dff0b

    • SSDEEP

      1536:wd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9Xwzp:wdseIOMEZEyFjEOFqTiQmOl/5xPvw1

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks