General

  • Target

    abd53b680a9fd6edda5772e61a5172f76019e22fa84634473d0202b200523ce4

  • Size

    80KB

  • Sample

    241228-byrd5stkby

  • MD5

    e18e24f356a8e8c63bf88dc297a899c4

  • SHA1

    aa8aa79865cafe82a191a03dd1529fb3efa840a6

  • SHA256

    abd53b680a9fd6edda5772e61a5172f76019e22fa84634473d0202b200523ce4

  • SHA512

    5ca22c975af625bb7cafae1976410233063e75b9ec21cfa5ec82855ffb39c9e1db83e789c8b5e7e24129ea3aacb8353da277829292c764611865acdb1b698c10

  • SSDEEP

    1536:sd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzB:UdseIOMEZEyFjEOFqTiQmOl/5xPvwN

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      abd53b680a9fd6edda5772e61a5172f76019e22fa84634473d0202b200523ce4

    • Size

      80KB

    • MD5

      e18e24f356a8e8c63bf88dc297a899c4

    • SHA1

      aa8aa79865cafe82a191a03dd1529fb3efa840a6

    • SHA256

      abd53b680a9fd6edda5772e61a5172f76019e22fa84634473d0202b200523ce4

    • SHA512

      5ca22c975af625bb7cafae1976410233063e75b9ec21cfa5ec82855ffb39c9e1db83e789c8b5e7e24129ea3aacb8353da277829292c764611865acdb1b698c10

    • SSDEEP

      1536:sd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzB:UdseIOMEZEyFjEOFqTiQmOl/5xPvwN

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks