General

  • Target

    454d1d11c6bec9b408bce96daf2503bfcc3cd4be47aa0f3afa1c11964da69702.exe

  • Size

    65KB

  • Sample

    250125-cg9d3azles

  • MD5

    683b1867a68c9dce93578084969a9ed4

  • SHA1

    893478ed46fda8220e6b6e5b22f5493be0d75ecf

  • SHA256

    454d1d11c6bec9b408bce96daf2503bfcc3cd4be47aa0f3afa1c11964da69702

  • SHA512

    bd2f8b1d7603b720130421902600c1f7250d72091f58db297930a63b01dd482d2ec6b7bbca621a461f4c2046f9f5ffea9bc27326d4daf6582b2ce61c7578b137

  • SSDEEP

    1536:jd9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/HzF:DdseIO+EZEyFjEOFqTiQmRHzF

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      454d1d11c6bec9b408bce96daf2503bfcc3cd4be47aa0f3afa1c11964da69702.exe

    • Size

      65KB

    • MD5

      683b1867a68c9dce93578084969a9ed4

    • SHA1

      893478ed46fda8220e6b6e5b22f5493be0d75ecf

    • SHA256

      454d1d11c6bec9b408bce96daf2503bfcc3cd4be47aa0f3afa1c11964da69702

    • SHA512

      bd2f8b1d7603b720130421902600c1f7250d72091f58db297930a63b01dd482d2ec6b7bbca621a461f4c2046f9f5ffea9bc27326d4daf6582b2ce61c7578b137

    • SSDEEP

      1536:jd9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/HzF:DdseIO+EZEyFjEOFqTiQmRHzF

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks