General

  • Target

    e037e4d455f855242d557ca4c8447ffd20cb163174e661fb09b67a63f73b08c7

  • Size

    33KB

  • Sample

    241125-ffsayavqbj

  • MD5

    d7c40a64b0459499352df149608e092a

  • SHA1

    da4fbf544f318a73fd942f181786273ded2f21c8

  • SHA256

    e037e4d455f855242d557ca4c8447ffd20cb163174e661fb09b67a63f73b08c7

  • SHA512

    0747c603a2452753eacff673bb236865dfad713a341b94b7de8a1694f5d38621def56745588d5dfdb9e835b48b789d0c1e140702b698b8f0d4f41f380776e938

  • SSDEEP

    768:0fVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7D:0fVRztyHo8QNHTk0qE5fslvN/956q

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      e037e4d455f855242d557ca4c8447ffd20cb163174e661fb09b67a63f73b08c7

    • Size

      33KB

    • MD5

      d7c40a64b0459499352df149608e092a

    • SHA1

      da4fbf544f318a73fd942f181786273ded2f21c8

    • SHA256

      e037e4d455f855242d557ca4c8447ffd20cb163174e661fb09b67a63f73b08c7

    • SHA512

      0747c603a2452753eacff673bb236865dfad713a341b94b7de8a1694f5d38621def56745588d5dfdb9e835b48b789d0c1e140702b698b8f0d4f41f380776e938

    • SSDEEP

      768:0fVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7D:0fVRztyHo8QNHTk0qE5fslvN/956q

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks