General

  • Target

    ab4ebe10c455386b14f644379fe6f4e91f73f9c41d247a7dfaee96051f692009

  • Size

    64KB

  • Sample

    241206-brfdassncz

  • MD5

    9e0a955da113d1de1e82afdf2e8464df

  • SHA1

    61b531f015149c0c82aafc96903ae3557e574e39

  • SHA256

    ab4ebe10c455386b14f644379fe6f4e91f73f9c41d247a7dfaee96051f692009

  • SHA512

    95d18bd2e1d650ec2d0eb13cd4ffd9bb291313599510663a1def54b06e1e7074a7a4ec090eb2ccf3e19e262219834bd74405e9be352c426cfbb1d92cfa34f5bf

  • SSDEEP

    768:IMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uA:IbIvYvZEyFKF6N4yS+AQmZcl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      ab4ebe10c455386b14f644379fe6f4e91f73f9c41d247a7dfaee96051f692009

    • Size

      64KB

    • MD5

      9e0a955da113d1de1e82afdf2e8464df

    • SHA1

      61b531f015149c0c82aafc96903ae3557e574e39

    • SHA256

      ab4ebe10c455386b14f644379fe6f4e91f73f9c41d247a7dfaee96051f692009

    • SHA512

      95d18bd2e1d650ec2d0eb13cd4ffd9bb291313599510663a1def54b06e1e7074a7a4ec090eb2ccf3e19e262219834bd74405e9be352c426cfbb1d92cfa34f5bf

    • SSDEEP

      768:IMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uA:IbIvYvZEyFKF6N4yS+AQmZcl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks