General

  • Target

    ffb526fc92007ca7be56fe7a718f2a024289039d34aa261765cf65b910cd526f.exe

  • Size

    61KB

  • Sample

    250126-1lstwavngw

  • MD5

    7359492f788df1f863ca9cb1107fe99d

  • SHA1

    fa5027dbb7584cedafea45cae2c2d8a678078905

  • SHA256

    ffb526fc92007ca7be56fe7a718f2a024289039d34aa261765cf65b910cd526f

  • SHA512

    f44d84d96ee58028ef625356bf45db9ae92fd174fc41da6a3d0b8c6626720068083bf47c043d61bedfee7a2adad981c3fa14594deb1bee95a04190c70fc5e515

  • SSDEEP

    1536:Ld9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZxl/5f:7dseIOMEZEyFjEOFqTiQmTl/5f

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      ffb526fc92007ca7be56fe7a718f2a024289039d34aa261765cf65b910cd526f.exe

    • Size

      61KB

    • MD5

      7359492f788df1f863ca9cb1107fe99d

    • SHA1

      fa5027dbb7584cedafea45cae2c2d8a678078905

    • SHA256

      ffb526fc92007ca7be56fe7a718f2a024289039d34aa261765cf65b910cd526f

    • SHA512

      f44d84d96ee58028ef625356bf45db9ae92fd174fc41da6a3d0b8c6626720068083bf47c043d61bedfee7a2adad981c3fa14594deb1bee95a04190c70fc5e515

    • SSDEEP

      1536:Ld9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZxl/5f:7dseIOMEZEyFjEOFqTiQmTl/5f

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks