General

  • Target

    79c6672cf83be612ad248df02bbb2a00bf5176418d242593db41e61942da5370

  • Size

    90KB

  • Sample

    241203-3xkzhs1ket

  • MD5

    8605a4679424f402c8f7d6f3a3347d90

  • SHA1

    1869b34e5acb21acdb15a58c70323fbeccf7c1f8

  • SHA256

    79c6672cf83be612ad248df02bbb2a00bf5176418d242593db41e61942da5370

  • SHA512

    0e2d9bc9a55d0ebe1e02c85447956332988d6a3bc5a99d447913663342941e9d870a374ab545c9d3bda2b8534b2970f5dccd2a13ee11abea11649f3e941e1bdf

  • SSDEEP

    768:UMEIvFGvZEr8LFK0ic46N4zeSdPAHwmZGp6JXXlaa5uAq:UbIvYvZEyFKF6N4aS5AQmZTl/5S

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      79c6672cf83be612ad248df02bbb2a00bf5176418d242593db41e61942da5370

    • Size

      90KB

    • MD5

      8605a4679424f402c8f7d6f3a3347d90

    • SHA1

      1869b34e5acb21acdb15a58c70323fbeccf7c1f8

    • SHA256

      79c6672cf83be612ad248df02bbb2a00bf5176418d242593db41e61942da5370

    • SHA512

      0e2d9bc9a55d0ebe1e02c85447956332988d6a3bc5a99d447913663342941e9d870a374ab545c9d3bda2b8534b2970f5dccd2a13ee11abea11649f3e941e1bdf

    • SSDEEP

      768:UMEIvFGvZEr8LFK0ic46N4zeSdPAHwmZGp6JXXlaa5uAq:UbIvYvZEyFKF6N4aS5AQmZTl/5S

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks