General

  • Target

    9149dac69f1a4cb1a039e460f7f562aafb66a54d47099162e630668defbde9d0

  • Size

    76KB

  • Sample

    250101-a8wk6s1jhp

  • MD5

    7cf0b22925596438209e6ef658887cbc

  • SHA1

    07ee522680da1341203441a23326042118ad1ad5

  • SHA256

    9149dac69f1a4cb1a039e460f7f562aafb66a54d47099162e630668defbde9d0

  • SHA512

    11c0c7fd0e737a507d383c8c27490597b812c1c808a11b7fcea888f69cdb1ee8f7086cfcc3eff364683146516ece3f440acda52828187d328bf0022e6e51590e

  • SSDEEP

    768:sMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAWb:sbIvYvZEyFKF6N4yS+AQmZTl/5Ob

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      9149dac69f1a4cb1a039e460f7f562aafb66a54d47099162e630668defbde9d0

    • Size

      76KB

    • MD5

      7cf0b22925596438209e6ef658887cbc

    • SHA1

      07ee522680da1341203441a23326042118ad1ad5

    • SHA256

      9149dac69f1a4cb1a039e460f7f562aafb66a54d47099162e630668defbde9d0

    • SHA512

      11c0c7fd0e737a507d383c8c27490597b812c1c808a11b7fcea888f69cdb1ee8f7086cfcc3eff364683146516ece3f440acda52828187d328bf0022e6e51590e

    • SSDEEP

      768:sMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAWb:sbIvYvZEyFKF6N4yS+AQmZTl/5Ob

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks