General

  • Target

    b7dab9c3da03335d977cb817cb89971188029765a71b495fcf92974d22c4538c.exe

  • Size

    65KB

  • Sample

    250124-n3csrsymal

  • MD5

    e46be8d0d00de9b46935c8980d1f3079

  • SHA1

    4c639e0805c24b7ec0d7ae07a312927057ed4b08

  • SHA256

    b7dab9c3da03335d977cb817cb89971188029765a71b495fcf92974d22c4538c

  • SHA512

    72fadf5d855a0a83276c5abdd96dd87988baea45706911f0990b6211e8338c2097eab427b66bda0dc6ea5331cc160b79fc3ab33ef434bb50f2d8dfccae1a1d99

  • SSDEEP

    1536:nd9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/Hzw:PdseIO+EZEyFjEOFqTiQmRHzw

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      b7dab9c3da03335d977cb817cb89971188029765a71b495fcf92974d22c4538c.exe

    • Size

      65KB

    • MD5

      e46be8d0d00de9b46935c8980d1f3079

    • SHA1

      4c639e0805c24b7ec0d7ae07a312927057ed4b08

    • SHA256

      b7dab9c3da03335d977cb817cb89971188029765a71b495fcf92974d22c4538c

    • SHA512

      72fadf5d855a0a83276c5abdd96dd87988baea45706911f0990b6211e8338c2097eab427b66bda0dc6ea5331cc160b79fc3ab33ef434bb50f2d8dfccae1a1d99

    • SSDEEP

      1536:nd9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/Hzw:PdseIO+EZEyFjEOFqTiQmRHzw

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks