General

  • Target

    89e5027a994879e2dbfbdab11eebe0b13db42ac623754f54835cc0f4e19eccf5

  • Size

    61KB

  • Sample

    241211-bkxzrssrdp

  • MD5

    017d109c5cc843b13731af066ada150c

  • SHA1

    b8f708f3c21a4766ca1283de3ad9984e59ef8a03

  • SHA256

    89e5027a994879e2dbfbdab11eebe0b13db42ac623754f54835cc0f4e19eccf5

  • SHA512

    51de8bd5811b92b86cb23de784627ac264fcbb32f0a6761ee9302c77e33e8efbc97ce111b9c61db51f0d078b5166304c62ec946ee806a20b9c1339ac3a4842cc

  • SSDEEP

    1536:sd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ4l/5P:UdseIOMEZEyFjEOFqTiQmil/5P

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      89e5027a994879e2dbfbdab11eebe0b13db42ac623754f54835cc0f4e19eccf5

    • Size

      61KB

    • MD5

      017d109c5cc843b13731af066ada150c

    • SHA1

      b8f708f3c21a4766ca1283de3ad9984e59ef8a03

    • SHA256

      89e5027a994879e2dbfbdab11eebe0b13db42ac623754f54835cc0f4e19eccf5

    • SHA512

      51de8bd5811b92b86cb23de784627ac264fcbb32f0a6761ee9302c77e33e8efbc97ce111b9c61db51f0d078b5166304c62ec946ee806a20b9c1339ac3a4842cc

    • SSDEEP

      1536:sd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ4l/5P:UdseIOMEZEyFjEOFqTiQmil/5P

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks