General

  • Target

    4fbce909ae0da37ed40da1c8aab0696eb797ffc637be1cf103dc9fbca8539f2e

  • Size

    76KB

  • Sample

    241203-181g8ssqbj

  • MD5

    7386d580dddefe874edb2d7825c51d52

  • SHA1

    16309f985e351bc5b34d99c5ab17ad9552ba50c9

  • SHA256

    4fbce909ae0da37ed40da1c8aab0696eb797ffc637be1cf103dc9fbca8539f2e

  • SHA512

    9b21054776bfd9462d5b6f0ebcf4f88605cb44921b0831fd1025a4d2e873501f27f45ccd366792a6e3b158594d4eaaad29afa81909c7f65e76120c2b123d11f1

  • SSDEEP

    1536:yd9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w113:CdseIOMEZEyFjEOFqaiQm5l/5w113

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      4fbce909ae0da37ed40da1c8aab0696eb797ffc637be1cf103dc9fbca8539f2e

    • Size

      76KB

    • MD5

      7386d580dddefe874edb2d7825c51d52

    • SHA1

      16309f985e351bc5b34d99c5ab17ad9552ba50c9

    • SHA256

      4fbce909ae0da37ed40da1c8aab0696eb797ffc637be1cf103dc9fbca8539f2e

    • SHA512

      9b21054776bfd9462d5b6f0ebcf4f88605cb44921b0831fd1025a4d2e873501f27f45ccd366792a6e3b158594d4eaaad29afa81909c7f65e76120c2b123d11f1

    • SSDEEP

      1536:yd9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w113:CdseIOMEZEyFjEOFqaiQm5l/5w113

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks