General

  • Target

    b85c3b1fb54025dceaa88513195383fb2f4db5fadec7ee4044615f66848ea7cd

  • Size

    76KB

  • Sample

    250104-e15lbstnhr

  • MD5

    45aead127cba32d28b8412ce31abf7b9

  • SHA1

    86d1cb708af4cd462a2293b5157701912983f02b

  • SHA256

    b85c3b1fb54025dceaa88513195383fb2f4db5fadec7ee4044615f66848ea7cd

  • SHA512

    9a39f15d0b632316cd2796217292efda138f43486f4584f0a0b5b774ad92fadfc140a9e6b10dfef06fd5dd266319deaec300a7c047344bf571a9fa47842ce636

  • SSDEEP

    1536:td9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w11L:FdseIOMEZEyFjEOFqaiQm5l/5w11L

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      b85c3b1fb54025dceaa88513195383fb2f4db5fadec7ee4044615f66848ea7cd

    • Size

      76KB

    • MD5

      45aead127cba32d28b8412ce31abf7b9

    • SHA1

      86d1cb708af4cd462a2293b5157701912983f02b

    • SHA256

      b85c3b1fb54025dceaa88513195383fb2f4db5fadec7ee4044615f66848ea7cd

    • SHA512

      9a39f15d0b632316cd2796217292efda138f43486f4584f0a0b5b774ad92fadfc140a9e6b10dfef06fd5dd266319deaec300a7c047344bf571a9fa47842ce636

    • SSDEEP

      1536:td9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w11L:FdseIOMEZEyFjEOFqaiQm5l/5w11L

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks