General

  • Target

    7cd649936ef82dd2fa216cee0d480450e1bc2984ce99f02c3895c512abf11e44

  • Size

    76KB

  • Sample

    241223-2lsdsatmev

  • MD5

    ec8cb84b2c65d0f127c29133297ec8c7

  • SHA1

    8fe58ed34a15f30bfa351d1ea6bf01c7cb929496

  • SHA256

    7cd649936ef82dd2fa216cee0d480450e1bc2984ce99f02c3895c512abf11e44

  • SHA512

    796e0ebdd0a7488f5bff830a8bf7347feb2497d3d7f1593b65fd6f98343ea3b5c461bccf3dc039e7f9c0a60d28b9aeef2184a85c5852b37892b091821789bba5

  • SSDEEP

    768:xMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAWb:xbIvYvZEyFKF6N4yS+AQmZTl/5Ob

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      7cd649936ef82dd2fa216cee0d480450e1bc2984ce99f02c3895c512abf11e44

    • Size

      76KB

    • MD5

      ec8cb84b2c65d0f127c29133297ec8c7

    • SHA1

      8fe58ed34a15f30bfa351d1ea6bf01c7cb929496

    • SHA256

      7cd649936ef82dd2fa216cee0d480450e1bc2984ce99f02c3895c512abf11e44

    • SHA512

      796e0ebdd0a7488f5bff830a8bf7347feb2497d3d7f1593b65fd6f98343ea3b5c461bccf3dc039e7f9c0a60d28b9aeef2184a85c5852b37892b091821789bba5

    • SSDEEP

      768:xMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAWb:xbIvYvZEyFKF6N4yS+AQmZTl/5Ob

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks