General

  • Target

    74b2b7f4def3c1165dab2d230c5140a7d88787140a31c3e493351b87fe34525e

  • Size

    61KB

  • Sample

    241227-23hwns1qaw

  • MD5

    71804a742300c2a3bf68eff07af5b9ad

  • SHA1

    7a9563a891ee7cf540f3f0212d0ae81b3c44df0b

  • SHA256

    74b2b7f4def3c1165dab2d230c5140a7d88787140a31c3e493351b87fe34525e

  • SHA512

    27119b1c450815379a16aa62b0722519f406e1d878d93355a63eb9fae558fb608bc0752fca324a6706c01cf842049d8a8056c8570efd9fe8745c3d8facf102d9

  • SSDEEP

    1536:6d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ4l/5P:adseIOMEZEyFjEOFqTiQmil/5P

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      74b2b7f4def3c1165dab2d230c5140a7d88787140a31c3e493351b87fe34525e

    • Size

      61KB

    • MD5

      71804a742300c2a3bf68eff07af5b9ad

    • SHA1

      7a9563a891ee7cf540f3f0212d0ae81b3c44df0b

    • SHA256

      74b2b7f4def3c1165dab2d230c5140a7d88787140a31c3e493351b87fe34525e

    • SHA512

      27119b1c450815379a16aa62b0722519f406e1d878d93355a63eb9fae558fb608bc0752fca324a6706c01cf842049d8a8056c8570efd9fe8745c3d8facf102d9

    • SSDEEP

      1536:6d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ4l/5P:adseIOMEZEyFjEOFqTiQmil/5P

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks