General

  • Target

    1acf66945809fdffd6e263b70097bb2d56acec2fe38a4eb8d3c672865d4f9f2e

  • Size

    33KB

  • Sample

    241127-y3wkzsvmfp

  • MD5

    627196b735ef70d0f7596bf838054b3c

  • SHA1

    73fb1276a0b520e5ab3d74aa21282eb112f328bc

  • SHA256

    1acf66945809fdffd6e263b70097bb2d56acec2fe38a4eb8d3c672865d4f9f2e

  • SHA512

    9866986dc5b4bcaf1cd9104f6fba38a924c4ca30e7f4e8c52c41cc83e129f8a893422099d0d5a7154a0ed0c92333c80a6038772eb58be45585623e1115fdd3b1

  • SSDEEP

    768:jfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7D:jfVRztyHo8QNHTk0qE5fslvN/956q

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      1acf66945809fdffd6e263b70097bb2d56acec2fe38a4eb8d3c672865d4f9f2e

    • Size

      33KB

    • MD5

      627196b735ef70d0f7596bf838054b3c

    • SHA1

      73fb1276a0b520e5ab3d74aa21282eb112f328bc

    • SHA256

      1acf66945809fdffd6e263b70097bb2d56acec2fe38a4eb8d3c672865d4f9f2e

    • SHA512

      9866986dc5b4bcaf1cd9104f6fba38a924c4ca30e7f4e8c52c41cc83e129f8a893422099d0d5a7154a0ed0c92333c80a6038772eb58be45585623e1115fdd3b1

    • SSDEEP

      768:jfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7D:jfVRztyHo8QNHTk0qE5fslvN/956q

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks