General

  • Target

    d10393ff9c9cce28f2f0b4623cb56b538cc9cce891990c4b0b6e0187d19abba0

  • Size

    88KB

  • Sample

    241212-dqtkmstjdk

  • MD5

    c1a8b1d05ae11a59776d46cedaf875bc

  • SHA1

    3355665a13d0d85ad329d10918cc433944226db0

  • SHA256

    d10393ff9c9cce28f2f0b4623cb56b538cc9cce891990c4b0b6e0187d19abba0

  • SHA512

    661ca0c659bf574985c2fb3e5d8cbd35314e93961ce852738d246040e05686d0b7d1a209fa6d8ebd49b62116ef15dcb67b2c48a920ee5ff9930638844b21a61a

  • SSDEEP

    1536:jd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5R:DdseIOMEZEyFjEOFqTiQm5l/5R

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      d10393ff9c9cce28f2f0b4623cb56b538cc9cce891990c4b0b6e0187d19abba0

    • Size

      88KB

    • MD5

      c1a8b1d05ae11a59776d46cedaf875bc

    • SHA1

      3355665a13d0d85ad329d10918cc433944226db0

    • SHA256

      d10393ff9c9cce28f2f0b4623cb56b538cc9cce891990c4b0b6e0187d19abba0

    • SHA512

      661ca0c659bf574985c2fb3e5d8cbd35314e93961ce852738d246040e05686d0b7d1a209fa6d8ebd49b62116ef15dcb67b2c48a920ee5ff9930638844b21a61a

    • SSDEEP

      1536:jd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5R:DdseIOMEZEyFjEOFqTiQm5l/5R

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks