General

  • Target

    3c6921867c1a38631ae82a64e0167f454cf67aee61427605f06c0be0a42e6eca

  • Size

    80KB

  • Sample

    241206-1e4mssvmdn

  • MD5

    a6a4d61642344f69842308d7d0b50104

  • SHA1

    1048ed9463d5cb12a871b47eb01a269915ac2e2b

  • SHA256

    3c6921867c1a38631ae82a64e0167f454cf67aee61427605f06c0be0a42e6eca

  • SHA512

    0d7c9a7e7410cc795929dfd3473a3b45a9bafb4a9ab311720f9d6aca1b62280fa07a721e9fae4659412a2ae8e678ad47f6dd3a96091daf57ee8c8b0f0d86008a

  • SSDEEP

    1536:Td9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzT:TdseIOMEZEyFjEOFqTiQmOl/5xPvwX

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      3c6921867c1a38631ae82a64e0167f454cf67aee61427605f06c0be0a42e6eca

    • Size

      80KB

    • MD5

      a6a4d61642344f69842308d7d0b50104

    • SHA1

      1048ed9463d5cb12a871b47eb01a269915ac2e2b

    • SHA256

      3c6921867c1a38631ae82a64e0167f454cf67aee61427605f06c0be0a42e6eca

    • SHA512

      0d7c9a7e7410cc795929dfd3473a3b45a9bafb4a9ab311720f9d6aca1b62280fa07a721e9fae4659412a2ae8e678ad47f6dd3a96091daf57ee8c8b0f0d86008a

    • SSDEEP

      1536:Td9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzT:TdseIOMEZEyFjEOFqTiQmOl/5xPvwX

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks