General

  • Target

    f7e0e5e66ba2a1089fb95049e556c1d4b8d2d85c2f1372c7f5eb4a43077aba2e

  • Size

    68KB

  • Sample

    241126-gmxdxaxqbt

  • MD5

    2e16b50c87ccf8fe2e484b3d6844e1a6

  • SHA1

    bc30ccfbc523d11ebf59c59bb845f859dc35b5d5

  • SHA256

    f7e0e5e66ba2a1089fb95049e556c1d4b8d2d85c2f1372c7f5eb4a43077aba2e

  • SHA512

    d2d0836f834c9e7f272f8f231fe9c58a3ef680facc597c2fa17cbe3460fa7ef8c329826bca87a40f2daa6cbfdfee45a45eee2e202e7ca57a6937426ccffd1732

  • SSDEEP

    1536:Bd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5v:xdseIOMEZEyFjEOFqTiQm5l/5v

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      f7e0e5e66ba2a1089fb95049e556c1d4b8d2d85c2f1372c7f5eb4a43077aba2e

    • Size

      68KB

    • MD5

      2e16b50c87ccf8fe2e484b3d6844e1a6

    • SHA1

      bc30ccfbc523d11ebf59c59bb845f859dc35b5d5

    • SHA256

      f7e0e5e66ba2a1089fb95049e556c1d4b8d2d85c2f1372c7f5eb4a43077aba2e

    • SHA512

      d2d0836f834c9e7f272f8f231fe9c58a3ef680facc597c2fa17cbe3460fa7ef8c329826bca87a40f2daa6cbfdfee45a45eee2e202e7ca57a6937426ccffd1732

    • SSDEEP

      1536:Bd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5v:xdseIOMEZEyFjEOFqTiQm5l/5v

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks