General

  • Target

    aefed05e41800481ddaf818d2ad5d0bac11a3f8f505c8fc780784872b1acb874

  • Size

    92KB

  • Sample

    250102-dvf54ssqdm

  • MD5

    47d993f1bd5705986bdd012fd96fc70f

  • SHA1

    4f07bd8b004d48dd25d5d74621104d7231b8f36f

  • SHA256

    aefed05e41800481ddaf818d2ad5d0bac11a3f8f505c8fc780784872b1acb874

  • SHA512

    6171987abdca94c22ffb1366f9f2982269b89914f3dbcea964016ecb379b6df401b06a6c885f74da32e6aa53d6c247a605ce52aeb0db4dc9e8c9800a554ea422

  • SSDEEP

    1536:cd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5d:kdseIOyEZEyFjEOFqTiQm5l/5d

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      aefed05e41800481ddaf818d2ad5d0bac11a3f8f505c8fc780784872b1acb874

    • Size

      92KB

    • MD5

      47d993f1bd5705986bdd012fd96fc70f

    • SHA1

      4f07bd8b004d48dd25d5d74621104d7231b8f36f

    • SHA256

      aefed05e41800481ddaf818d2ad5d0bac11a3f8f505c8fc780784872b1acb874

    • SHA512

      6171987abdca94c22ffb1366f9f2982269b89914f3dbcea964016ecb379b6df401b06a6c885f74da32e6aa53d6c247a605ce52aeb0db4dc9e8c9800a554ea422

    • SSDEEP

      1536:cd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5d:kdseIOyEZEyFjEOFqTiQm5l/5d

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks