General

  • Target

    00f8c51cb8458f3ba540aa5c9d6539d09ffdcd4b355fb3a37ef2e936a49486e9N.exe

  • Size

    80KB

  • Sample

    250104-grbyrsxqhl

  • MD5

    50364cbcb35131975258fd8d772c8430

  • SHA1

    0781f40b409e2e09bd5a8cae52d659ac5fb55534

  • SHA256

    00f8c51cb8458f3ba540aa5c9d6539d09ffdcd4b355fb3a37ef2e936a49486e9

  • SHA512

    8fc1aa4c26cbe873284cdbf45d87d13e7d9646c028671d91289fe55952ac087c2469a61595bcd447211ba4bb55b05624d43d916931414b30da5246939d2c196b

  • SSDEEP

    1536:Td9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzB:TdseIOMEZEyFjEOFqTiQmOl/5xPvwN

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      00f8c51cb8458f3ba540aa5c9d6539d09ffdcd4b355fb3a37ef2e936a49486e9N.exe

    • Size

      80KB

    • MD5

      50364cbcb35131975258fd8d772c8430

    • SHA1

      0781f40b409e2e09bd5a8cae52d659ac5fb55534

    • SHA256

      00f8c51cb8458f3ba540aa5c9d6539d09ffdcd4b355fb3a37ef2e936a49486e9

    • SHA512

      8fc1aa4c26cbe873284cdbf45d87d13e7d9646c028671d91289fe55952ac087c2469a61595bcd447211ba4bb55b05624d43d916931414b30da5246939d2c196b

    • SSDEEP

      1536:Td9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzB:TdseIOMEZEyFjEOFqTiQmOl/5xPvwN

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks