General

  • Target

    90b22d88f5a5a9d9610dadab13a95305b42597845623423bc3ca2cb37dbd9dbe

  • Size

    64KB

  • Sample

    241205-axczpayqcs

  • MD5

    ba95bb9829385f2f3eb1a7d8a043f151

  • SHA1

    3afc10065aee0791ef19e84375966c0165ea4eb9

  • SHA256

    90b22d88f5a5a9d9610dadab13a95305b42597845623423bc3ca2cb37dbd9dbe

  • SHA512

    c2d71d0e421bdb77a7dd8799ffe158cb6728ce7467e64ed23597e7b060cd324a7dabcb691c32476be3570b06a27f17e63a794991165a7355efffc95df9baac74

  • SSDEEP

    768:BMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uA:BbIvYvZEyFKF6N4yS+AQmZcl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      90b22d88f5a5a9d9610dadab13a95305b42597845623423bc3ca2cb37dbd9dbe

    • Size

      64KB

    • MD5

      ba95bb9829385f2f3eb1a7d8a043f151

    • SHA1

      3afc10065aee0791ef19e84375966c0165ea4eb9

    • SHA256

      90b22d88f5a5a9d9610dadab13a95305b42597845623423bc3ca2cb37dbd9dbe

    • SHA512

      c2d71d0e421bdb77a7dd8799ffe158cb6728ce7467e64ed23597e7b060cd324a7dabcb691c32476be3570b06a27f17e63a794991165a7355efffc95df9baac74

    • SSDEEP

      768:BMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uA:BbIvYvZEyFKF6N4yS+AQmZcl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks