General

  • Target

    98abc47b4b0c93506f633c90a7cae277de0d13049b5b31c61ce6780df99eb07a

  • Size

    61KB

  • Sample

    241128-bxghjszjat

  • MD5

    5528b9063b04fa681e15b2d8174d9321

  • SHA1

    b892a2eb511c795d7ed33218384d99071b34f187

  • SHA256

    98abc47b4b0c93506f633c90a7cae277de0d13049b5b31c61ce6780df99eb07a

  • SHA512

    872c610a29ad4504cba06f73477b1b8c3495f4e9a650c59ed95ab067a89d2b71468e7242a7d99c9ee377247fcb5662d08735f855ef540968fed68573ebf452ff

  • SSDEEP

    1536:xd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZnql/5:BdseIOMEZEyFjEOFqTiQmFql/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      98abc47b4b0c93506f633c90a7cae277de0d13049b5b31c61ce6780df99eb07a

    • Size

      61KB

    • MD5

      5528b9063b04fa681e15b2d8174d9321

    • SHA1

      b892a2eb511c795d7ed33218384d99071b34f187

    • SHA256

      98abc47b4b0c93506f633c90a7cae277de0d13049b5b31c61ce6780df99eb07a

    • SHA512

      872c610a29ad4504cba06f73477b1b8c3495f4e9a650c59ed95ab067a89d2b71468e7242a7d99c9ee377247fcb5662d08735f855ef540968fed68573ebf452ff

    • SSDEEP

      1536:xd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZnql/5:BdseIOMEZEyFjEOFqTiQmFql/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks