General

  • Target

    024fc58d5bbdc4742cd3d1ad8f0171ed720ec390109a46ebe823dfbcae55fbd8.exe

  • Size

    61KB

  • Sample

    250201-px4jzasmdt

  • MD5

    8d57d8dfd259264e79379015a5f4671f

  • SHA1

    b125a6848923f0cba60a8aca4ce1af7a9401eb1c

  • SHA256

    024fc58d5bbdc4742cd3d1ad8f0171ed720ec390109a46ebe823dfbcae55fbd8

  • SHA512

    7f86e1ccbdedfc99468188b73ee7f599f09d20d9168268316a0d1abe43932c91fde5d4eb091843192108f20458c8fc5d27d8856823dd59fef10418892f4300c2

  • SSDEEP

    1536:bd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZxl/5t:rdseIOMEZEyFjEOFqTiQmTl/5t

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      024fc58d5bbdc4742cd3d1ad8f0171ed720ec390109a46ebe823dfbcae55fbd8.exe

    • Size

      61KB

    • MD5

      8d57d8dfd259264e79379015a5f4671f

    • SHA1

      b125a6848923f0cba60a8aca4ce1af7a9401eb1c

    • SHA256

      024fc58d5bbdc4742cd3d1ad8f0171ed720ec390109a46ebe823dfbcae55fbd8

    • SHA512

      7f86e1ccbdedfc99468188b73ee7f599f09d20d9168268316a0d1abe43932c91fde5d4eb091843192108f20458c8fc5d27d8856823dd59fef10418892f4300c2

    • SSDEEP

      1536:bd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZxl/5t:rdseIOMEZEyFjEOFqTiQmTl/5t

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks