General

  • Target

    4bf14d759489e666413b9c907a26aa9edaee72af6499f69c74b6f490fbab7fb4

  • Size

    65KB

  • Sample

    250103-2tt8cazphl

  • MD5

    48bd7132d989b48d0a6b8766d77f4b60

  • SHA1

    c47d9b3d79e7cf24e0ad87342491a089e1e3442c

  • SHA256

    4bf14d759489e666413b9c907a26aa9edaee72af6499f69c74b6f490fbab7fb4

  • SHA512

    2cbddb5444d2fb3489bc25b3d54b84dc3b7ec2cc3d6ad5cad04356b8c415b2233463048fdc81b2c04c73d449cd0d2e102257093bf4d492c6ec589208827774fe

  • SSDEEP

    1536:/d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/Hz:3dseIO+EZEyFjEOFqTiQmRHz

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      4bf14d759489e666413b9c907a26aa9edaee72af6499f69c74b6f490fbab7fb4

    • Size

      65KB

    • MD5

      48bd7132d989b48d0a6b8766d77f4b60

    • SHA1

      c47d9b3d79e7cf24e0ad87342491a089e1e3442c

    • SHA256

      4bf14d759489e666413b9c907a26aa9edaee72af6499f69c74b6f490fbab7fb4

    • SHA512

      2cbddb5444d2fb3489bc25b3d54b84dc3b7ec2cc3d6ad5cad04356b8c415b2233463048fdc81b2c04c73d449cd0d2e102257093bf4d492c6ec589208827774fe

    • SSDEEP

      1536:/d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/Hz:3dseIO+EZEyFjEOFqTiQmRHz

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks