General

  • Target

    613c74090f22646927926bf3f0bf78391f6c1d5d8751d7ae2ba831b592f0a559

  • Size

    61KB

  • Sample

    241122-24w5pa1qg1

  • MD5

    4cdd5c4035f93797a4a9f1ee147c5f42

  • SHA1

    3db6630290a8dfe358ea842303a576c655f0606c

  • SHA256

    613c74090f22646927926bf3f0bf78391f6c1d5d8751d7ae2ba831b592f0a559

  • SHA512

    e73bd6095dcf0b395a4c4ccf6a679247ef80725d9f2e7257be85b2efc73f39a11be5eeba630417ca05bd0a001968f081c59ec17465959c9889c3269d9b14432b

  • SSDEEP

    768:8MEIvFGvZEr8LFK0ic46N47eSdYAHwmZ7Bp6JXXlaa5uA:8bIvYvZEyFKF6N4yS+AQmZIl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      613c74090f22646927926bf3f0bf78391f6c1d5d8751d7ae2ba831b592f0a559

    • Size

      61KB

    • MD5

      4cdd5c4035f93797a4a9f1ee147c5f42

    • SHA1

      3db6630290a8dfe358ea842303a576c655f0606c

    • SHA256

      613c74090f22646927926bf3f0bf78391f6c1d5d8751d7ae2ba831b592f0a559

    • SHA512

      e73bd6095dcf0b395a4c4ccf6a679247ef80725d9f2e7257be85b2efc73f39a11be5eeba630417ca05bd0a001968f081c59ec17465959c9889c3269d9b14432b

    • SSDEEP

      768:8MEIvFGvZEr8LFK0ic46N47eSdYAHwmZ7Bp6JXXlaa5uA:8bIvYvZEyFKF6N4yS+AQmZIl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks