General

  • Target

    e4158ffbf04657a3c0b2533d8b44d17464b61d12ce24eca4857ee2d1951517d2N.exe

  • Size

    72KB

  • Sample

    250124-p1vq8sypfw

  • MD5

    46dce827d6810b68dcff36ff3cf261b0

  • SHA1

    409590ee15eed0de8ddba0cd64b5d0ab732bf9cd

  • SHA256

    e4158ffbf04657a3c0b2533d8b44d17464b61d12ce24eca4857ee2d1951517d2

  • SHA512

    cd1a3481d897f44942d358bf0c92333813c0f5667deaf899bebf105ae26ca56a3a3d197b2d95fae160b2339f6d085e4d5397086799fab176aca91cdf6fbf5bbd

  • SSDEEP

    768:NMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAW:NbIvYvZEyFKF6N4yS+AQmZTl/5O

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      e4158ffbf04657a3c0b2533d8b44d17464b61d12ce24eca4857ee2d1951517d2N.exe

    • Size

      72KB

    • MD5

      46dce827d6810b68dcff36ff3cf261b0

    • SHA1

      409590ee15eed0de8ddba0cd64b5d0ab732bf9cd

    • SHA256

      e4158ffbf04657a3c0b2533d8b44d17464b61d12ce24eca4857ee2d1951517d2

    • SHA512

      cd1a3481d897f44942d358bf0c92333813c0f5667deaf899bebf105ae26ca56a3a3d197b2d95fae160b2339f6d085e4d5397086799fab176aca91cdf6fbf5bbd

    • SSDEEP

      768:NMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAW:NbIvYvZEyFKF6N4yS+AQmZTl/5O

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks