General

  • Target

    1d5f315f0f442e556e23a46dca91e723cfe0f7fe6a89246602a703c74d064822

  • Size

    64KB

  • Sample

    241209-ysnsdsvjel

  • MD5

    ccd70b4c481552f8f98d8baaee4193ab

  • SHA1

    9756ae9490e3b16fd705d11d0fbd0841a4027fcf

  • SHA256

    1d5f315f0f442e556e23a46dca91e723cfe0f7fe6a89246602a703c74d064822

  • SHA512

    8b99e51e809dce49a24b6761237777d0f6221b2c26cabdc045cde3f1582d455d2e0d6f1acf13801d6ef885465200e39ee74a534596162f5aae9476c70fd2b380

  • SSDEEP

    768:UMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uA:UbIvYvZEyFKF6N4yS+AQmZcl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      1d5f315f0f442e556e23a46dca91e723cfe0f7fe6a89246602a703c74d064822

    • Size

      64KB

    • MD5

      ccd70b4c481552f8f98d8baaee4193ab

    • SHA1

      9756ae9490e3b16fd705d11d0fbd0841a4027fcf

    • SHA256

      1d5f315f0f442e556e23a46dca91e723cfe0f7fe6a89246602a703c74d064822

    • SHA512

      8b99e51e809dce49a24b6761237777d0f6221b2c26cabdc045cde3f1582d455d2e0d6f1acf13801d6ef885465200e39ee74a534596162f5aae9476c70fd2b380

    • SSDEEP

      768:UMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uA:UbIvYvZEyFKF6N4yS+AQmZcl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks