General

  • Target

    01c05dcd1c267a3c3786d9b515e0ebe3ed8e3497bbadeaec723780b2165b2e8b.exe

  • Size

    61KB

  • Sample

    241202-tsrf3a1qfw

  • MD5

    0dcb12355a629fd756e3c46245639e20

  • SHA1

    55817ca7ba09edda8dee7bb89cb7983a099004f7

  • SHA256

    01c05dcd1c267a3c3786d9b515e0ebe3ed8e3497bbadeaec723780b2165b2e8b

  • SHA512

    e7a810d7426eaaae7120fd4bb2a8f27a80f103bf4e3df7e93190e7fabc1c814dca9d72e213bdabd54b95438f9c1dc79ec0b52a856b9dc8876341d12979d953cd

  • SSDEEP

    1536:4d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZnql/5d:IdseIOMEZEyFjEOFqTiQmFql/5d

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      01c05dcd1c267a3c3786d9b515e0ebe3ed8e3497bbadeaec723780b2165b2e8b.exe

    • Size

      61KB

    • MD5

      0dcb12355a629fd756e3c46245639e20

    • SHA1

      55817ca7ba09edda8dee7bb89cb7983a099004f7

    • SHA256

      01c05dcd1c267a3c3786d9b515e0ebe3ed8e3497bbadeaec723780b2165b2e8b

    • SHA512

      e7a810d7426eaaae7120fd4bb2a8f27a80f103bf4e3df7e93190e7fabc1c814dca9d72e213bdabd54b95438f9c1dc79ec0b52a856b9dc8876341d12979d953cd

    • SSDEEP

      1536:4d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZnql/5d:IdseIOMEZEyFjEOFqTiQmFql/5d

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks