General

  • Target

    43a9886d405b412a655ae67a43be2c566acfebd7c3da9710e812339f40fbcc03.exe

  • Size

    76KB

  • Sample

    250124-vgavlsyjcw

  • MD5

    1076a4ca22700c9bd3071b3f5be10fca

  • SHA1

    9f3ce9cf20ee6b47676cf2cdee7dbaffb2e41880

  • SHA256

    43a9886d405b412a655ae67a43be2c566acfebd7c3da9710e812339f40fbcc03

  • SHA512

    092873c0450e21eb8adc6f4d103dca5995e1f356baca69b8f1ee78c4c7695dcd21667b8a32f20bccf7d0041aabdd2569dfcd335a010af7fbbcfcf3bc667aff2a

  • SSDEEP

    1536:cd9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w11V:kdseIOMEZEyFjEOFqaiQm5l/5w11V

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      43a9886d405b412a655ae67a43be2c566acfebd7c3da9710e812339f40fbcc03.exe

    • Size

      76KB

    • MD5

      1076a4ca22700c9bd3071b3f5be10fca

    • SHA1

      9f3ce9cf20ee6b47676cf2cdee7dbaffb2e41880

    • SHA256

      43a9886d405b412a655ae67a43be2c566acfebd7c3da9710e812339f40fbcc03

    • SHA512

      092873c0450e21eb8adc6f4d103dca5995e1f356baca69b8f1ee78c4c7695dcd21667b8a32f20bccf7d0041aabdd2569dfcd335a010af7fbbcfcf3bc667aff2a

    • SSDEEP

      1536:cd9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w11V:kdseIOMEZEyFjEOFqaiQm5l/5w11V

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks