General

  • Target

    54c6fd08ee54b9af62d89c572818604ba420de37a8ee9892d5c3d3ca12efe4e9

  • Size

    61KB

  • Sample

    241128-2rh3astmaw

  • MD5

    542eabe402e27707273b8f793764a2f0

  • SHA1

    b371e4b14851339d9d392ecc9378fac85f38edf0

  • SHA256

    54c6fd08ee54b9af62d89c572818604ba420de37a8ee9892d5c3d3ca12efe4e9

  • SHA512

    473a569a43c9b09a16e6df2765bad6b3679782ff7e4f6f365130074c73f26f933113395aacefb7622619613623707d2fad72adc2d085fe30a102333cfe2bc56d

  • SSDEEP

    1536:5d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZnql/5:ZdseIOMEZEyFjEOFqTiQmFql/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      54c6fd08ee54b9af62d89c572818604ba420de37a8ee9892d5c3d3ca12efe4e9

    • Size

      61KB

    • MD5

      542eabe402e27707273b8f793764a2f0

    • SHA1

      b371e4b14851339d9d392ecc9378fac85f38edf0

    • SHA256

      54c6fd08ee54b9af62d89c572818604ba420de37a8ee9892d5c3d3ca12efe4e9

    • SHA512

      473a569a43c9b09a16e6df2765bad6b3679782ff7e4f6f365130074c73f26f933113395aacefb7622619613623707d2fad72adc2d085fe30a102333cfe2bc56d

    • SSDEEP

      1536:5d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZnql/5:ZdseIOMEZEyFjEOFqTiQmFql/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks