General

  • Target

    b597cccb15a4ba56a304c2bbce11d9d94f22753039293e35c8e3ed0526282294.exe

  • Size

    61KB

  • Sample

    241205-nhv4lsykdl

  • MD5

    d0eb853b69cbcc4757456263156bc1bb

  • SHA1

    a44d4894b5cfe87d99e51e8ce72b825a1aa5416f

  • SHA256

    b597cccb15a4ba56a304c2bbce11d9d94f22753039293e35c8e3ed0526282294

  • SHA512

    c0ae41557d1af1ca13e70deb8443c706697200fb6f22b74411fa4dd967f4de07e222b39daa8ac39bd603e888046979a0c9bdef76649d724313879f91dd81f5d6

  • SSDEEP

    1536:td9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZxl/5/:FdseIOMEZEyFjEOFqTiQmTl/5/

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      b597cccb15a4ba56a304c2bbce11d9d94f22753039293e35c8e3ed0526282294.exe

    • Size

      61KB

    • MD5

      d0eb853b69cbcc4757456263156bc1bb

    • SHA1

      a44d4894b5cfe87d99e51e8ce72b825a1aa5416f

    • SHA256

      b597cccb15a4ba56a304c2bbce11d9d94f22753039293e35c8e3ed0526282294

    • SHA512

      c0ae41557d1af1ca13e70deb8443c706697200fb6f22b74411fa4dd967f4de07e222b39daa8ac39bd603e888046979a0c9bdef76649d724313879f91dd81f5d6

    • SSDEEP

      1536:td9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZxl/5/:FdseIOMEZEyFjEOFqTiQmTl/5/

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks