General

  • Target

    ed65551c6e02771116ae3e8961488194a58b82063f38f992d0388bef972819ed

  • Size

    71KB

  • Sample

    241229-gb9j4atqcp

  • MD5

    962086da916bed4b6c8c4a31b7b2dfd3

  • SHA1

    53fbbeb2ac17f172397f6d7129f17aa2be6cde93

  • SHA256

    ed65551c6e02771116ae3e8961488194a58b82063f38f992d0388bef972819ed

  • SHA512

    425e33623bf1636caf95096a06426bc0e200e0aab92fe1a564e2e4685f010d1041f4b0fe37ad1dad36fa6aee5f78d22cfaabb7b1c97481b47f8b9234b15e390e

  • SSDEEP

    1536:Ld9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbH:7dseIOMEZEyFjEOFqTiQmQDHIbH

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      ed65551c6e02771116ae3e8961488194a58b82063f38f992d0388bef972819ed

    • Size

      71KB

    • MD5

      962086da916bed4b6c8c4a31b7b2dfd3

    • SHA1

      53fbbeb2ac17f172397f6d7129f17aa2be6cde93

    • SHA256

      ed65551c6e02771116ae3e8961488194a58b82063f38f992d0388bef972819ed

    • SHA512

      425e33623bf1636caf95096a06426bc0e200e0aab92fe1a564e2e4685f010d1041f4b0fe37ad1dad36fa6aee5f78d22cfaabb7b1c97481b47f8b9234b15e390e

    • SSDEEP

      1536:Ld9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbH:7dseIOMEZEyFjEOFqTiQmQDHIbH

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks