General

  • Target

    942ec238b7ac93df2cde0d9dde2ef83ea2df05719611ac7c02f0c8561c50b126N.exe

  • Size

    76KB

  • Sample

    250103-psxkvstpet

  • MD5

    f631c17e6769f71b0836e606bd8fc5b0

  • SHA1

    cff9c884387f2790d6e6565ceae64a9c9cb92dc0

  • SHA256

    942ec238b7ac93df2cde0d9dde2ef83ea2df05719611ac7c02f0c8561c50b126

  • SHA512

    1049d9f39d70bade985f0de953689488677e369d5b695422794867a66d05cf8f4df04440182b2b76a7ca6e412da131fa70af2291f0f6fe42343d84151eed53ee

  • SSDEEP

    768:mMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAWb:mbIvYvZEyFKF6N4yS+AQmZTl/5Ob

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      942ec238b7ac93df2cde0d9dde2ef83ea2df05719611ac7c02f0c8561c50b126N.exe

    • Size

      76KB

    • MD5

      f631c17e6769f71b0836e606bd8fc5b0

    • SHA1

      cff9c884387f2790d6e6565ceae64a9c9cb92dc0

    • SHA256

      942ec238b7ac93df2cde0d9dde2ef83ea2df05719611ac7c02f0c8561c50b126

    • SHA512

      1049d9f39d70bade985f0de953689488677e369d5b695422794867a66d05cf8f4df04440182b2b76a7ca6e412da131fa70af2291f0f6fe42343d84151eed53ee

    • SSDEEP

      768:mMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAWb:mbIvYvZEyFKF6N4yS+AQmZTl/5Ob

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks