General

  • Target

    03a512e79ab5e13215ffd6314bfec1cffa571fc5501744628c9c6bc823a01b24N.exe

  • Size

    89KB

  • Sample

    250103-s3v2katqen

  • MD5

    61dcf1f43ad6ca9743db5759ca8a0880

  • SHA1

    a6107086850b3b2885a3682acebda7329c4289f7

  • SHA256

    03a512e79ab5e13215ffd6314bfec1cffa571fc5501744628c9c6bc823a01b24

  • SHA512

    6c1d73723c14092e3879186c4c2d0f2f235033eee9bc039eff70857170cb50e8f14464859a5a28bb2da1d8c4199a577efb35c1adf10f0e5301039b89a8b49dfa

  • SSDEEP

    768:NMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA1:NbIvYvZEyFKF6N4yS+AQmZTl/5d

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      03a512e79ab5e13215ffd6314bfec1cffa571fc5501744628c9c6bc823a01b24N.exe

    • Size

      89KB

    • MD5

      61dcf1f43ad6ca9743db5759ca8a0880

    • SHA1

      a6107086850b3b2885a3682acebda7329c4289f7

    • SHA256

      03a512e79ab5e13215ffd6314bfec1cffa571fc5501744628c9c6bc823a01b24

    • SHA512

      6c1d73723c14092e3879186c4c2d0f2f235033eee9bc039eff70857170cb50e8f14464859a5a28bb2da1d8c4199a577efb35c1adf10f0e5301039b89a8b49dfa

    • SSDEEP

      768:NMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA1:NbIvYvZEyFKF6N4yS+AQmZTl/5d

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks