General

  • Target

    24090c7f7c1ded71b21be54a91fe0c73054a541608aefba1f5adca42daf35dc8

  • Size

    64KB

  • Sample

    241128-zmc95swjdr

  • MD5

    1f04667374508060ce6a19e53e73e716

  • SHA1

    0e50a1d92c5b792c6b4de050d8155dab87dffebb

  • SHA256

    24090c7f7c1ded71b21be54a91fe0c73054a541608aefba1f5adca42daf35dc8

  • SHA512

    3bc7374198cd1b922e070a74f5212f1f0a0ad9fa9db4ad8fa814138b61aaaa327da42a622293f4699510817a1e22644c77495f1e6ec7af9570cd7b7993ece2b5

  • SSDEEP

    768:3MEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uA:3bIvYvZEyFKF6N4yS+AQmZcl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      24090c7f7c1ded71b21be54a91fe0c73054a541608aefba1f5adca42daf35dc8

    • Size

      64KB

    • MD5

      1f04667374508060ce6a19e53e73e716

    • SHA1

      0e50a1d92c5b792c6b4de050d8155dab87dffebb

    • SHA256

      24090c7f7c1ded71b21be54a91fe0c73054a541608aefba1f5adca42daf35dc8

    • SHA512

      3bc7374198cd1b922e070a74f5212f1f0a0ad9fa9db4ad8fa814138b61aaaa327da42a622293f4699510817a1e22644c77495f1e6ec7af9570cd7b7993ece2b5

    • SSDEEP

      768:3MEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uA:3bIvYvZEyFKF6N4yS+AQmZcl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks