General

  • Target

    45471ca56bdb1255ad5ff2779fc49985f6862614245e8bb5117b030f146397d9N.exe

  • Size

    88KB

  • Sample

    241216-hsnvds1jbr

  • MD5

    73a2ffa70e42ef92001b48d19f303290

  • SHA1

    1fdb6315973a91a139dcac8f64502a5dd60ded6a

  • SHA256

    45471ca56bdb1255ad5ff2779fc49985f6862614245e8bb5117b030f146397d9

  • SHA512

    7bf64747cec0bb908c70d58273c1076c508c870f32383d85fd5eaf233b10e1504d59eb7ee80d6b0c00f380877e11564e4bf6b82958e9c1984f754fa627f04cdd

  • SSDEEP

    1536:qd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5z:qdseIOMEZEyFjEOFqTiQm5l/5z

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      45471ca56bdb1255ad5ff2779fc49985f6862614245e8bb5117b030f146397d9N.exe

    • Size

      88KB

    • MD5

      73a2ffa70e42ef92001b48d19f303290

    • SHA1

      1fdb6315973a91a139dcac8f64502a5dd60ded6a

    • SHA256

      45471ca56bdb1255ad5ff2779fc49985f6862614245e8bb5117b030f146397d9

    • SHA512

      7bf64747cec0bb908c70d58273c1076c508c870f32383d85fd5eaf233b10e1504d59eb7ee80d6b0c00f380877e11564e4bf6b82958e9c1984f754fa627f04cdd

    • SSDEEP

      1536:qd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5z:qdseIOMEZEyFjEOFqTiQm5l/5z

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks