General

  • Target

    fe909fb43b4bf487f2ad19f672272ae6be0470f6f74397de0f9e1eaaa677dbfa

  • Size

    64KB

  • Sample

    241225-fabq1aylcn

  • MD5

    2a06742f5696965c00733c16274e43bc

  • SHA1

    6a31e2c64968220c112a8056ff8a96dd59d8ebb1

  • SHA256

    fe909fb43b4bf487f2ad19f672272ae6be0470f6f74397de0f9e1eaaa677dbfa

  • SHA512

    5fb9f06afc0353c692e22092350f23cf4e5af6e4c7daae9dac3cf639898fe01b92bad6bac51b17a814d5b6c51bf9d22de13aa4cf9822bb0e4c66648b1cd707b4

  • SSDEEP

    768:NMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uAN:NbIvYvZEyFKF6N4yS+AQmZcl/51

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      fe909fb43b4bf487f2ad19f672272ae6be0470f6f74397de0f9e1eaaa677dbfa

    • Size

      64KB

    • MD5

      2a06742f5696965c00733c16274e43bc

    • SHA1

      6a31e2c64968220c112a8056ff8a96dd59d8ebb1

    • SHA256

      fe909fb43b4bf487f2ad19f672272ae6be0470f6f74397de0f9e1eaaa677dbfa

    • SHA512

      5fb9f06afc0353c692e22092350f23cf4e5af6e4c7daae9dac3cf639898fe01b92bad6bac51b17a814d5b6c51bf9d22de13aa4cf9822bb0e4c66648b1cd707b4

    • SSDEEP

      768:NMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uAN:NbIvYvZEyFKF6N4yS+AQmZcl/51

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks