General

  • Target

    32f795de88acd19c31b9a5df534721c307900c4223a9ff4e520146ac6458d520

  • Size

    76KB

  • Sample

    241201-zsk7yawpcj

  • MD5

    a9713078c7fd3535245a036aa3a9f777

  • SHA1

    84851ede7b2b766e2dec5878fcdfbdaa817ba3b7

  • SHA256

    32f795de88acd19c31b9a5df534721c307900c4223a9ff4e520146ac6458d520

  • SHA512

    f4700e4a2546a08eca77ba4de92cf99bfae9fb0e888ca80d23065b9bbd49463691fdc3697c9e3cf2f7ebe209cffbd4562ccfeb846c276f26f2f44365290fe5af

  • SSDEEP

    1536:Pd9dseIOcE93NIvYvZEyFhEEOF6N4yS+AQmZTl/5s11:ndseIOKEZEyF6EOFqTiQm5l/5s11

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      32f795de88acd19c31b9a5df534721c307900c4223a9ff4e520146ac6458d520

    • Size

      76KB

    • MD5

      a9713078c7fd3535245a036aa3a9f777

    • SHA1

      84851ede7b2b766e2dec5878fcdfbdaa817ba3b7

    • SHA256

      32f795de88acd19c31b9a5df534721c307900c4223a9ff4e520146ac6458d520

    • SHA512

      f4700e4a2546a08eca77ba4de92cf99bfae9fb0e888ca80d23065b9bbd49463691fdc3697c9e3cf2f7ebe209cffbd4562ccfeb846c276f26f2f44365290fe5af

    • SSDEEP

      1536:Pd9dseIOcE93NIvYvZEyFhEEOF6N4yS+AQmZTl/5s11:ndseIOKEZEyF6EOFqTiQm5l/5s11

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks