General

  • Target

    274ad00fdc29f464258332aad183ebe3bcb89f81a29c88db10d9e72241d27cc2

  • Size

    62KB

  • Sample

    241203-zgb5wssrh1

  • MD5

    def4277f492dc31aaeb57d68056cce01

  • SHA1

    6d8e3f11b79f0ba3f6417498f29350cef5981d1a

  • SHA256

    274ad00fdc29f464258332aad183ebe3bcb89f81a29c88db10d9e72241d27cc2

  • SHA512

    536988634a5da74869db2a1fb22d3a03b1b423c732f70cfa9cdcb1ea4a89bdfd99bd54b8f08fe4689d129a97cd29f55dcb4bc939162a637b673aa3839624b3e7

  • SSDEEP

    768:yMEIvFGvZEr8LFK0ic46N47eSdYAHwmZQp6JXXlaa5uA:ybIvYvZEyFKF6N4yS+AQmZtl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      274ad00fdc29f464258332aad183ebe3bcb89f81a29c88db10d9e72241d27cc2

    • Size

      62KB

    • MD5

      def4277f492dc31aaeb57d68056cce01

    • SHA1

      6d8e3f11b79f0ba3f6417498f29350cef5981d1a

    • SHA256

      274ad00fdc29f464258332aad183ebe3bcb89f81a29c88db10d9e72241d27cc2

    • SHA512

      536988634a5da74869db2a1fb22d3a03b1b423c732f70cfa9cdcb1ea4a89bdfd99bd54b8f08fe4689d129a97cd29f55dcb4bc939162a637b673aa3839624b3e7

    • SSDEEP

      768:yMEIvFGvZEr8LFK0ic46N47eSdYAHwmZQp6JXXlaa5uA:ybIvYvZEyFKF6N4yS+AQmZtl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks