General

  • Target

    4b432d7bb10444693c48e9402d325a7e7430c71989fbc0e0489442ce7b20c5c2

  • Size

    61KB

  • Sample

    241211-1evd5ayqgv

  • MD5

    94b4fcf1ef3bbdd5cdc759637cb3ab51

  • SHA1

    99048ab86c5b712ceab0e8e3a735025df0823fa7

  • SHA256

    4b432d7bb10444693c48e9402d325a7e7430c71989fbc0e0489442ce7b20c5c2

  • SHA512

    e942872a4dc15d54f9f3d43e704efeb52918dc84933e6b93956e2e480c11d8ff372b632fb1a2fe73453fe0c733e912f14c0046999d50ac7f0c54f3132cd87452

  • SSDEEP

    1536:zd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZil/5:zdseIOMEZEyFjEOFqTiQmcl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      4b432d7bb10444693c48e9402d325a7e7430c71989fbc0e0489442ce7b20c5c2

    • Size

      61KB

    • MD5

      94b4fcf1ef3bbdd5cdc759637cb3ab51

    • SHA1

      99048ab86c5b712ceab0e8e3a735025df0823fa7

    • SHA256

      4b432d7bb10444693c48e9402d325a7e7430c71989fbc0e0489442ce7b20c5c2

    • SHA512

      e942872a4dc15d54f9f3d43e704efeb52918dc84933e6b93956e2e480c11d8ff372b632fb1a2fe73453fe0c733e912f14c0046999d50ac7f0c54f3132cd87452

    • SSDEEP

      1536:zd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZil/5:zdseIOMEZEyFjEOFqTiQmcl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks