General

  • Target

    073b1222a5f6399a945b64f0cf9810a5cc639552b1eeccd351a845e097aa7edbN.exe

  • Size

    72KB

  • Sample

    250202-f527faxpdv

  • MD5

    c52359b57f84782b520914960b104280

  • SHA1

    b3c7572130f877d941f565eb6690af8e835d6dd3

  • SHA256

    073b1222a5f6399a945b64f0cf9810a5cc639552b1eeccd351a845e097aa7edb

  • SHA512

    16b8dbe49fda6f9478ce02268db009b1235c277a04f153dde740701bbe351ac1aabe2d5e43d60230753bdcbf9103589bf00eb8ff50ca79034813369cdb5e5757

  • SSDEEP

    1536:vd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211t:HdseIOMEZEyFjEOFqTiQm5l/5211t

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      073b1222a5f6399a945b64f0cf9810a5cc639552b1eeccd351a845e097aa7edbN.exe

    • Size

      72KB

    • MD5

      c52359b57f84782b520914960b104280

    • SHA1

      b3c7572130f877d941f565eb6690af8e835d6dd3

    • SHA256

      073b1222a5f6399a945b64f0cf9810a5cc639552b1eeccd351a845e097aa7edb

    • SHA512

      16b8dbe49fda6f9478ce02268db009b1235c277a04f153dde740701bbe351ac1aabe2d5e43d60230753bdcbf9103589bf00eb8ff50ca79034813369cdb5e5757

    • SSDEEP

      1536:vd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211t:HdseIOMEZEyFjEOFqTiQm5l/5211t

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks