General

  • Target

    f578ed658552fdfd757091521b92afaf97b5f747e4b7de1d0782315b228744ac

  • Size

    76KB

  • Sample

    241216-fc9qtavlet

  • MD5

    2b07ebed6c3cb422b0282d9e1a54037c

  • SHA1

    6bde080396fdb0e8ac34a665519e6473b53fd964

  • SHA256

    f578ed658552fdfd757091521b92afaf97b5f747e4b7de1d0782315b228744ac

  • SHA512

    9a4ff2373e5dbda86ac3ac7d0dd05871e39a85db039cdf8311a62c4784f67ea847ceea7c46278756050df03980539d752624494792fdc2ac351c0c620d422c1e

  • SSDEEP

    768:gMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAWr:gbIvYvZEyFKF6N4yS+AQmZTl/5Or

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      f578ed658552fdfd757091521b92afaf97b5f747e4b7de1d0782315b228744ac

    • Size

      76KB

    • MD5

      2b07ebed6c3cb422b0282d9e1a54037c

    • SHA1

      6bde080396fdb0e8ac34a665519e6473b53fd964

    • SHA256

      f578ed658552fdfd757091521b92afaf97b5f747e4b7de1d0782315b228744ac

    • SHA512

      9a4ff2373e5dbda86ac3ac7d0dd05871e39a85db039cdf8311a62c4784f67ea847ceea7c46278756050df03980539d752624494792fdc2ac351c0c620d422c1e

    • SSDEEP

      768:gMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAWr:gbIvYvZEyFKF6N4yS+AQmZTl/5Or

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks