General

  • Target

    7b5d185be23630ee667b35b00d898bed834b0f0a170b7f11157145f7e030818a

  • Size

    76KB

  • Sample

    241220-cdsbdawmet

  • MD5

    56080554397ca8fb2f5a16c333bfeb76

  • SHA1

    9864307dfc7a84e8a6d45dc742f2cd6415bbb34d

  • SHA256

    7b5d185be23630ee667b35b00d898bed834b0f0a170b7f11157145f7e030818a

  • SHA512

    27189da3101a4b1ee18a0609c713b159e0b558d2229603ac23eea698f89cd77369b67c20003a5edf1680cfecb64388c24b74657c3c4d36af3a80cfdf628782cd

  • SSDEEP

    1536:ed9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w11L:GdseIOMEZEyFjEOFqaiQm5l/5w11L

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      7b5d185be23630ee667b35b00d898bed834b0f0a170b7f11157145f7e030818a

    • Size

      76KB

    • MD5

      56080554397ca8fb2f5a16c333bfeb76

    • SHA1

      9864307dfc7a84e8a6d45dc742f2cd6415bbb34d

    • SHA256

      7b5d185be23630ee667b35b00d898bed834b0f0a170b7f11157145f7e030818a

    • SHA512

      27189da3101a4b1ee18a0609c713b159e0b558d2229603ac23eea698f89cd77369b67c20003a5edf1680cfecb64388c24b74657c3c4d36af3a80cfdf628782cd

    • SSDEEP

      1536:ed9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w11L:GdseIOMEZEyFjEOFqaiQm5l/5w11L

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks