General

  • Target

    7fffa69118d4cf3f2edcd938eb23b0956268064df727c694626a1976e264a346

  • Size

    84KB

  • Sample

    241205-3kwv9atrcl

  • MD5

    af6fc273d243e5ecdfbde224f897eb99

  • SHA1

    851d74962a9ffd6d003a84beda7938d22eb6c4a0

  • SHA256

    7fffa69118d4cf3f2edcd938eb23b0956268064df727c694626a1976e264a346

  • SHA512

    2b02d9c761fc9ac8778dda06d8f4b99a7422889217c14f462cc7fc92f0dbf1c8783b060ecea85da1700c50a61e1971fbd00518f4d5faf57efb6b6f6a4dd21b87

  • SSDEEP

    768:yMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:ybIvYvZEyFKF6N4yS+AQmZTl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      7fffa69118d4cf3f2edcd938eb23b0956268064df727c694626a1976e264a346

    • Size

      84KB

    • MD5

      af6fc273d243e5ecdfbde224f897eb99

    • SHA1

      851d74962a9ffd6d003a84beda7938d22eb6c4a0

    • SHA256

      7fffa69118d4cf3f2edcd938eb23b0956268064df727c694626a1976e264a346

    • SHA512

      2b02d9c761fc9ac8778dda06d8f4b99a7422889217c14f462cc7fc92f0dbf1c8783b060ecea85da1700c50a61e1971fbd00518f4d5faf57efb6b6f6a4dd21b87

    • SSDEEP

      768:yMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:ybIvYvZEyFKF6N4yS+AQmZTl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks