General

  • Target

    5bcde6e85cf72e06c3522d4a844c3e7137b0a94bf6d68cb2b62551b80011e115

  • Size

    71KB

  • Sample

    241211-15fcwsvlgr

  • MD5

    7ad7998da8f6fb8bdf08f6440e70535e

  • SHA1

    b6d83fbea6c81c4fcc79efbdaaab1104bc4c9621

  • SHA256

    5bcde6e85cf72e06c3522d4a844c3e7137b0a94bf6d68cb2b62551b80011e115

  • SHA512

    7cdaa12ee54c3a2087ad7b57e7a877a29ec515079de6327b131bfa7531228ad87fa97262d7dfa51ac803b740ad8cb6994b3bf5cfa97159a5b2c850c10c370aba

  • SSDEEP

    1536:hd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbHH:RdseIOMEZEyFjEOFqTiQmQDHIbHH

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      5bcde6e85cf72e06c3522d4a844c3e7137b0a94bf6d68cb2b62551b80011e115

    • Size

      71KB

    • MD5

      7ad7998da8f6fb8bdf08f6440e70535e

    • SHA1

      b6d83fbea6c81c4fcc79efbdaaab1104bc4c9621

    • SHA256

      5bcde6e85cf72e06c3522d4a844c3e7137b0a94bf6d68cb2b62551b80011e115

    • SHA512

      7cdaa12ee54c3a2087ad7b57e7a877a29ec515079de6327b131bfa7531228ad87fa97262d7dfa51ac803b740ad8cb6994b3bf5cfa97159a5b2c850c10c370aba

    • SSDEEP

      1536:hd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbHH:RdseIOMEZEyFjEOFqTiQmQDHIbHH

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks