General

  • Target

    a79d1a2f1f5a707dec9eac603fb91cbe324fc0e205f92acace4a609311cac66cN.exe

  • Size

    61KB

  • Sample

    250124-fsaxessnfr

  • MD5

    4981f7765f07778d0a525d78ab232a30

  • SHA1

    f5a1a906965985a86aa1efb5db061cd56ebf3444

  • SHA256

    a79d1a2f1f5a707dec9eac603fb91cbe324fc0e205f92acace4a609311cac66c

  • SHA512

    5e899eab8d4b4bb9f82f36bb17fbf3c85e874f7ef17d7d37d5d4e84cf3efff93d13bbd83f9f9c483256b07283404dc9f2fc73f1eb16ec8b0d1de48c121cc9111

  • SSDEEP

    1536:kd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZll/5:cdseIOMEZEyFjEOFqTiQmPl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      a79d1a2f1f5a707dec9eac603fb91cbe324fc0e205f92acace4a609311cac66cN.exe

    • Size

      61KB

    • MD5

      4981f7765f07778d0a525d78ab232a30

    • SHA1

      f5a1a906965985a86aa1efb5db061cd56ebf3444

    • SHA256

      a79d1a2f1f5a707dec9eac603fb91cbe324fc0e205f92acace4a609311cac66c

    • SHA512

      5e899eab8d4b4bb9f82f36bb17fbf3c85e874f7ef17d7d37d5d4e84cf3efff93d13bbd83f9f9c483256b07283404dc9f2fc73f1eb16ec8b0d1de48c121cc9111

    • SSDEEP

      1536:kd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZll/5:cdseIOMEZEyFjEOFqTiQmPl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks