General

  • Target

    c5023c8d0c1effe4a6d944295c192a70N.exe

  • Size

    63KB

  • Sample

    240902-pvcngazfqn

  • MD5

    c5023c8d0c1effe4a6d944295c192a70

  • SHA1

    539bd3b303d96938fa60bc33fc8dc12410650ef9

  • SHA256

    19b2a139bdf81e44673c54e9ea003664aa433736fd5491273a18c60c05dfd763

  • SHA512

    0885d8576b977c77ff5e2fc534ceb44ada03b4e5e8816ed002d2936e16dcadf14d91a0181ab66a564f4681a4dba7e01f35470e6489232dd8ed7564a4bbc60c2d

  • SSDEEP

    768:RMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:RbIvYvZEyFKF6N4yS+AQmZTl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      c5023c8d0c1effe4a6d944295c192a70N.exe

    • Size

      63KB

    • MD5

      c5023c8d0c1effe4a6d944295c192a70

    • SHA1

      539bd3b303d96938fa60bc33fc8dc12410650ef9

    • SHA256

      19b2a139bdf81e44673c54e9ea003664aa433736fd5491273a18c60c05dfd763

    • SHA512

      0885d8576b977c77ff5e2fc534ceb44ada03b4e5e8816ed002d2936e16dcadf14d91a0181ab66a564f4681a4dba7e01f35470e6489232dd8ed7564a4bbc60c2d

    • SSDEEP

      768:RMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:RbIvYvZEyFKF6N4yS+AQmZTl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks