General

  • Target

    d3023ceefccb82c10785cc0c110cfeb0542b87c80c7bcc60adda7b27c479f557

  • Size

    92KB

  • Sample

    241210-bnzb1atkcq

  • MD5

    cf4f8fb094141a9382ef9bfab04abc0c

  • SHA1

    581a9207f9eba54afedb9ce6b40932a4b7d31e82

  • SHA256

    d3023ceefccb82c10785cc0c110cfeb0542b87c80c7bcc60adda7b27c479f557

  • SHA512

    d27fc40a261b115a568c448f7cf2ad316b543b3d18309e13133c196babfdedb72a6ebfd8dfd74e7dd2e2abe8c831388b7426d3d26f994ccc2943de1c9be66352

  • SSDEEP

    1536:qd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5:qdseIOyEZEyFjEOFqTiQm5l/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      d3023ceefccb82c10785cc0c110cfeb0542b87c80c7bcc60adda7b27c479f557

    • Size

      92KB

    • MD5

      cf4f8fb094141a9382ef9bfab04abc0c

    • SHA1

      581a9207f9eba54afedb9ce6b40932a4b7d31e82

    • SHA256

      d3023ceefccb82c10785cc0c110cfeb0542b87c80c7bcc60adda7b27c479f557

    • SHA512

      d27fc40a261b115a568c448f7cf2ad316b543b3d18309e13133c196babfdedb72a6ebfd8dfd74e7dd2e2abe8c831388b7426d3d26f994ccc2943de1c9be66352

    • SSDEEP

      1536:qd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5:qdseIOyEZEyFjEOFqTiQm5l/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks