General

  • Target

    52578dce0a7fb82f7e6e3c094d7e7171ea01627f9556086cb798b3d45c3a78ba.exe

  • Size

    33KB

  • Sample

    241203-p7gg7awnds

  • MD5

    8eef2c3025fb9974e0f0b42b6a5c570e

  • SHA1

    34ac41720ca5aedb54c119795c713dd5deab0443

  • SHA256

    52578dce0a7fb82f7e6e3c094d7e7171ea01627f9556086cb798b3d45c3a78ba

  • SHA512

    d9eccd1da5b4be77e1dcb3a4e61631004d9278a63688e67c15163bc89982fb76e090f4cda7390995c82eaa0dcf01435240a9f0c7071f658d64dcc11542a94fc7

  • SSDEEP

    768:efVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7DF:efVRztyHo8QNHTk0qE5fslvN/956qo

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      52578dce0a7fb82f7e6e3c094d7e7171ea01627f9556086cb798b3d45c3a78ba.exe

    • Size

      33KB

    • MD5

      8eef2c3025fb9974e0f0b42b6a5c570e

    • SHA1

      34ac41720ca5aedb54c119795c713dd5deab0443

    • SHA256

      52578dce0a7fb82f7e6e3c094d7e7171ea01627f9556086cb798b3d45c3a78ba

    • SHA512

      d9eccd1da5b4be77e1dcb3a4e61631004d9278a63688e67c15163bc89982fb76e090f4cda7390995c82eaa0dcf01435240a9f0c7071f658d64dcc11542a94fc7

    • SSDEEP

      768:efVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7DF:efVRztyHo8QNHTk0qE5fslvN/956qo

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks