General

  • Target

    ed947bcdfd68e8defec90b566666abda203065d607965773c54795b57383e6c7

  • Size

    33KB

  • Sample

    241201-e8kacsxkdt

  • MD5

    63455487816642b6f08505cd82b1f3d7

  • SHA1

    49573025461b6e35bb8453d00de179b0cdc90c69

  • SHA256

    ed947bcdfd68e8defec90b566666abda203065d607965773c54795b57383e6c7

  • SHA512

    6c38a8af736c0235e5dc5809d50b54a29c9af41ae5cf4985a3f3c9b3347a93fc2f6280f92d8505589115a79e9312270279999ebb11e4ffd81a8d89f4b6ce935a

  • SSDEEP

    768:XfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7D:XfVRztyHo8QNHTk0qE5fslvN/956q

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      ed947bcdfd68e8defec90b566666abda203065d607965773c54795b57383e6c7

    • Size

      33KB

    • MD5

      63455487816642b6f08505cd82b1f3d7

    • SHA1

      49573025461b6e35bb8453d00de179b0cdc90c69

    • SHA256

      ed947bcdfd68e8defec90b566666abda203065d607965773c54795b57383e6c7

    • SHA512

      6c38a8af736c0235e5dc5809d50b54a29c9af41ae5cf4985a3f3c9b3347a93fc2f6280f92d8505589115a79e9312270279999ebb11e4ffd81a8d89f4b6ce935a

    • SSDEEP

      768:XfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7D:XfVRztyHo8QNHTk0qE5fslvN/956q

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks