General

  • Target

    394266789cc94c5fb47c066e957cc24452b08c46781a86b88f60608c87f325fe

  • Size

    64KB

  • Sample

    241226-z7bl2s1jh1

  • MD5

    65c8c108cff057c548c5ea19921c79aa

  • SHA1

    d4e7d46ccb3dbb4e9b140c821f369bef52d74915

  • SHA256

    394266789cc94c5fb47c066e957cc24452b08c46781a86b88f60608c87f325fe

  • SHA512

    7a00b940b5b92c3ac7b0d2b77d90ff6f4899932021642dda35e219076af6131645457f8ab04f02fde6b22d056e593bc7434ffad96c7762ab61354a527af6ad26

  • SSDEEP

    768:PMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uAN:PbIvYvZEyFKF6N4yS+AQmZcl/51

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      394266789cc94c5fb47c066e957cc24452b08c46781a86b88f60608c87f325fe

    • Size

      64KB

    • MD5

      65c8c108cff057c548c5ea19921c79aa

    • SHA1

      d4e7d46ccb3dbb4e9b140c821f369bef52d74915

    • SHA256

      394266789cc94c5fb47c066e957cc24452b08c46781a86b88f60608c87f325fe

    • SHA512

      7a00b940b5b92c3ac7b0d2b77d90ff6f4899932021642dda35e219076af6131645457f8ab04f02fde6b22d056e593bc7434ffad96c7762ab61354a527af6ad26

    • SSDEEP

      768:PMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uAN:PbIvYvZEyFKF6N4yS+AQmZcl/51

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks