General

  • Target

    49fcd6d4170626cba00ae03bb0f21b18e69a0058b87ce9548e15de9021399ca4

  • Size

    33KB

  • Sample

    241226-1wvq8asmdp

  • MD5

    493ff34e77901f716fab30569f3128b1

  • SHA1

    34306b4a8a27bb745b8dfc769243cc762bd64c9a

  • SHA256

    49fcd6d4170626cba00ae03bb0f21b18e69a0058b87ce9548e15de9021399ca4

  • SHA512

    16dbef0509ef3b4be44ab3e866b57fc4f782f2b9f280ee7e2bf000275adabe03fe9a7b76a9c7f4372aa7257f04237dfbeef676654fea95518f4bfd100d3b26ba

  • SSDEEP

    768:KfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7D:KfVRztyHo8QNHTk0qE5fslvN/956q

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      49fcd6d4170626cba00ae03bb0f21b18e69a0058b87ce9548e15de9021399ca4

    • Size

      33KB

    • MD5

      493ff34e77901f716fab30569f3128b1

    • SHA1

      34306b4a8a27bb745b8dfc769243cc762bd64c9a

    • SHA256

      49fcd6d4170626cba00ae03bb0f21b18e69a0058b87ce9548e15de9021399ca4

    • SHA512

      16dbef0509ef3b4be44ab3e866b57fc4f782f2b9f280ee7e2bf000275adabe03fe9a7b76a9c7f4372aa7257f04237dfbeef676654fea95518f4bfd100d3b26ba

    • SSDEEP

      768:KfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7D:KfVRztyHo8QNHTk0qE5fslvN/956q

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks