General

  • Target

    d5ae2a375ffb1f147db269960a541604c29dd755914d3eb022a8581d584aa618.exe

  • Size

    76KB

  • Sample

    250113-m78kkazkgt

  • MD5

    5cc0cdf7bbc8751277deeda11a727f40

  • SHA1

    05a026b8f2fe11ee58684bfb68f1d8c5416529db

  • SHA256

    d5ae2a375ffb1f147db269960a541604c29dd755914d3eb022a8581d584aa618

  • SHA512

    4d1bf9fb3ce0a0bc94e051c5d22f70474e637bbe5c62bee20d1e5d94e1fa0166e75e23ed9777a4798683aac41290bc2fbced15aa5a487d6aec3d85eb28d52e2a

  • SSDEEP

    1536:3d9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w11f:/dseIOMEZEyFjEOFqaiQm5l/5w11f

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      d5ae2a375ffb1f147db269960a541604c29dd755914d3eb022a8581d584aa618.exe

    • Size

      76KB

    • MD5

      5cc0cdf7bbc8751277deeda11a727f40

    • SHA1

      05a026b8f2fe11ee58684bfb68f1d8c5416529db

    • SHA256

      d5ae2a375ffb1f147db269960a541604c29dd755914d3eb022a8581d584aa618

    • SHA512

      4d1bf9fb3ce0a0bc94e051c5d22f70474e637bbe5c62bee20d1e5d94e1fa0166e75e23ed9777a4798683aac41290bc2fbced15aa5a487d6aec3d85eb28d52e2a

    • SSDEEP

      1536:3d9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w11f:/dseIOMEZEyFjEOFqaiQm5l/5w11f

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks