General

  • Target

    50c8e53f499598b672dbae9eddfc6cd415d2dc4726500fe637007ab86f3a481aN.exe

  • Size

    92KB

  • Sample

    250201-tkh5qa1qdp

  • MD5

    98108b579aa9cb4b2ce50da34ddab740

  • SHA1

    b340d2bbacd14cc02b54e47b44c5c99d34c84434

  • SHA256

    50c8e53f499598b672dbae9eddfc6cd415d2dc4726500fe637007ab86f3a481a

  • SHA512

    906e30a5c96cc99d1e70a092c814f6a882ec80cd7dbea11874fdcdab182b59423dc21f3ea09c47ed54233b7f25feabdb8c4ffaa8bdfaff87fca12b711141c04b

  • SSDEEP

    1536:Zd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5d:5dseIOyEZEyFjEOFqTiQm5l/5d

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      50c8e53f499598b672dbae9eddfc6cd415d2dc4726500fe637007ab86f3a481aN.exe

    • Size

      92KB

    • MD5

      98108b579aa9cb4b2ce50da34ddab740

    • SHA1

      b340d2bbacd14cc02b54e47b44c5c99d34c84434

    • SHA256

      50c8e53f499598b672dbae9eddfc6cd415d2dc4726500fe637007ab86f3a481a

    • SHA512

      906e30a5c96cc99d1e70a092c814f6a882ec80cd7dbea11874fdcdab182b59423dc21f3ea09c47ed54233b7f25feabdb8c4ffaa8bdfaff87fca12b711141c04b

    • SSDEEP

      1536:Zd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5d:5dseIOyEZEyFjEOFqTiQm5l/5d

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks