General

  • Target

    503b14de51486ba69830a6f42f2b8f569da016caf857f8d16fc3dcddf14ce98f.exe

  • Size

    61KB

  • Sample

    241218-2p5hhsvpcs

  • MD5

    5b59fdfc3f93c3b1fd2be24f2632d44a

  • SHA1

    54af018f546775e794ae404397ecd91b8e840d73

  • SHA256

    503b14de51486ba69830a6f42f2b8f569da016caf857f8d16fc3dcddf14ce98f

  • SHA512

    d9af13bd153563ea0281d549cc2b63445d2d0fa20054b2ce8680ec861702a6ca5fda8c8a6424f907005871c295875a947df0ee0767a0e2744b542e35f2573eb1

  • SSDEEP

    1536:kd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZil/5n:cdseIOMEZEyFjEOFqTiQmcl/5n

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      503b14de51486ba69830a6f42f2b8f569da016caf857f8d16fc3dcddf14ce98f.exe

    • Size

      61KB

    • MD5

      5b59fdfc3f93c3b1fd2be24f2632d44a

    • SHA1

      54af018f546775e794ae404397ecd91b8e840d73

    • SHA256

      503b14de51486ba69830a6f42f2b8f569da016caf857f8d16fc3dcddf14ce98f

    • SHA512

      d9af13bd153563ea0281d549cc2b63445d2d0fa20054b2ce8680ec861702a6ca5fda8c8a6424f907005871c295875a947df0ee0767a0e2744b542e35f2573eb1

    • SSDEEP

      1536:kd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZil/5n:cdseIOMEZEyFjEOFqTiQmcl/5n

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks