General

  • Target

    432c26adde146901ccb18dac77a1339991bbf39e8ab34f061eae6bfd0c5075a1

  • Size

    84KB

  • Sample

    241210-1kg1zsvqhm

  • MD5

    e1be79886e6f2041654f4fc69175f206

  • SHA1

    910f36d2b197e4e6b02c6d727a8558e09ef77217

  • SHA256

    432c26adde146901ccb18dac77a1339991bbf39e8ab34f061eae6bfd0c5075a1

  • SHA512

    317c23fcf89d49fea1f527a5133e992db09d60484232f10835f12cbe75611ca4c15297661636948b08e30c9dce0fcf8a86972988674153e9f071db8386077139

  • SSDEEP

    1536:Ad9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5z:gdseIOMEZEyFjEOFqTiQm5l/5z

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      432c26adde146901ccb18dac77a1339991bbf39e8ab34f061eae6bfd0c5075a1

    • Size

      84KB

    • MD5

      e1be79886e6f2041654f4fc69175f206

    • SHA1

      910f36d2b197e4e6b02c6d727a8558e09ef77217

    • SHA256

      432c26adde146901ccb18dac77a1339991bbf39e8ab34f061eae6bfd0c5075a1

    • SHA512

      317c23fcf89d49fea1f527a5133e992db09d60484232f10835f12cbe75611ca4c15297661636948b08e30c9dce0fcf8a86972988674153e9f071db8386077139

    • SSDEEP

      1536:Ad9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5z:gdseIOMEZEyFjEOFqTiQm5l/5z

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks