General

  • Target

    43b264b22e0cd1c0de436d3ba69830747d5edce16aed1ec6d12eedf9321b135e

  • Size

    61KB

  • Sample

    241203-1rffqs1qgq

  • MD5

    f3b018ddf1a4ca8b391548a4ee71189a

  • SHA1

    b729ce38ead7634d67ae611d9e43177dcac19009

  • SHA256

    43b264b22e0cd1c0de436d3ba69830747d5edce16aed1ec6d12eedf9321b135e

  • SHA512

    2648e9eb879160a911b0ac926d9feb025090f417566036459f3e0d24bfff7bb95856f05b76a0e8baa56cc8af2deb5a0af69c67338d1627791d765db51dbdf8db

  • SSDEEP

    1536:Dd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZWl/5l:jdseIOMEZEyFjEOFqTiQmUl/5l

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      43b264b22e0cd1c0de436d3ba69830747d5edce16aed1ec6d12eedf9321b135e

    • Size

      61KB

    • MD5

      f3b018ddf1a4ca8b391548a4ee71189a

    • SHA1

      b729ce38ead7634d67ae611d9e43177dcac19009

    • SHA256

      43b264b22e0cd1c0de436d3ba69830747d5edce16aed1ec6d12eedf9321b135e

    • SHA512

      2648e9eb879160a911b0ac926d9feb025090f417566036459f3e0d24bfff7bb95856f05b76a0e8baa56cc8af2deb5a0af69c67338d1627791d765db51dbdf8db

    • SSDEEP

      1536:Dd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZWl/5l:jdseIOMEZEyFjEOFqTiQmUl/5l

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks