General

  • Target

    5493709f2597c32d542fc38e26f7e5ba06e145ab697745cbb4fa808c8e980086N.exe

  • Size

    80KB

  • Sample

    250104-kvjdssvjen

  • MD5

    05fb1bd5a07f2af2f887d2d050bc7150

  • SHA1

    95d4377c79e2807bcb0429c3140280908cdef99b

  • SHA256

    5493709f2597c32d542fc38e26f7e5ba06e145ab697745cbb4fa808c8e980086

  • SHA512

    cbc9344f723abffda13c6be833e6597a8b24721f73792a322ff9a7c5f3a5425528f94ce9db71dd63d38181441a3e958160a2ac05bc53ad05ceca0776a65144cb

  • SSDEEP

    1536:md9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzB:edseIOMEZEyFjEOFqTiQmOl/5xPvwN

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      5493709f2597c32d542fc38e26f7e5ba06e145ab697745cbb4fa808c8e980086N.exe

    • Size

      80KB

    • MD5

      05fb1bd5a07f2af2f887d2d050bc7150

    • SHA1

      95d4377c79e2807bcb0429c3140280908cdef99b

    • SHA256

      5493709f2597c32d542fc38e26f7e5ba06e145ab697745cbb4fa808c8e980086

    • SHA512

      cbc9344f723abffda13c6be833e6597a8b24721f73792a322ff9a7c5f3a5425528f94ce9db71dd63d38181441a3e958160a2ac05bc53ad05ceca0776a65144cb

    • SSDEEP

      1536:md9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzB:edseIOMEZEyFjEOFqTiQmOl/5xPvwN

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks