General

  • Target

    015eb74a40ed673508cbb498237fa63e48b4940fc6c32d3d5e5dd4598b2fc033

  • Size

    92KB

  • Sample

    250105-xsc58avpck

  • MD5

    2be30265d272f74f1aca2612f0684f54

  • SHA1

    a36210ff240468e9f2cc25a5848689629c917e83

  • SHA256

    015eb74a40ed673508cbb498237fa63e48b4940fc6c32d3d5e5dd4598b2fc033

  • SHA512

    645594d199256ebc93cd344a915d29b2fef503abe3ca2e8acedb7386a14b08ff4cc44dd4c0dc25c4de5867e742c8b935ea2ce76b6b4808873958c639ef40a2d7

  • SSDEEP

    1536:Xd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5d:fdseIOyEZEyFjEOFqTiQm5l/5d

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      015eb74a40ed673508cbb498237fa63e48b4940fc6c32d3d5e5dd4598b2fc033

    • Size

      92KB

    • MD5

      2be30265d272f74f1aca2612f0684f54

    • SHA1

      a36210ff240468e9f2cc25a5848689629c917e83

    • SHA256

      015eb74a40ed673508cbb498237fa63e48b4940fc6c32d3d5e5dd4598b2fc033

    • SHA512

      645594d199256ebc93cd344a915d29b2fef503abe3ca2e8acedb7386a14b08ff4cc44dd4c0dc25c4de5867e742c8b935ea2ce76b6b4808873958c639ef40a2d7

    • SSDEEP

      1536:Xd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5d:fdseIOyEZEyFjEOFqTiQm5l/5d

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks