General

  • Target

    db0803d803353feb68a9b86994a4904c32d61291757625bb7d855b5ac053fef3N.exe

  • Size

    61KB

  • Sample

    241218-jvcqkszqgt

  • MD5

    d376f8fb586d399cbc7fbcea97191c40

  • SHA1

    54d2dc2fd119b41138f1c458312bcc73a4965bd7

  • SHA256

    db0803d803353feb68a9b86994a4904c32d61291757625bb7d855b5ac053fef3

  • SHA512

    fab8a20ab385249b6102cd3b009bfdaf44753374e7959e292ab237229f1575b3b6f086bf2e1d12030e3ec4f70f564cd47fa5ca478c9674546943b89c534e6f34

  • SSDEEP

    1536:Md9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZil/5:0dseIOMEZEyFjEOFqTiQmcl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      db0803d803353feb68a9b86994a4904c32d61291757625bb7d855b5ac053fef3N.exe

    • Size

      61KB

    • MD5

      d376f8fb586d399cbc7fbcea97191c40

    • SHA1

      54d2dc2fd119b41138f1c458312bcc73a4965bd7

    • SHA256

      db0803d803353feb68a9b86994a4904c32d61291757625bb7d855b5ac053fef3

    • SHA512

      fab8a20ab385249b6102cd3b009bfdaf44753374e7959e292ab237229f1575b3b6f086bf2e1d12030e3ec4f70f564cd47fa5ca478c9674546943b89c534e6f34

    • SSDEEP

      1536:Md9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZil/5:0dseIOMEZEyFjEOFqTiQmcl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks