General

  • Target

    ebaec2f032d7012d4e76cb591d4aa25503382fdb383db73be86f48941b935937

  • Size

    80KB

  • Sample

    250110-lrx88atjdq

  • MD5

    97364296e4ee297b00f3c24ead1b0f21

  • SHA1

    69f10315ad5a4b3e60b28388cba3ef1a692a788d

  • SHA256

    ebaec2f032d7012d4e76cb591d4aa25503382fdb383db73be86f48941b935937

  • SHA512

    51427963e7bfcd5465b7ee0844f53928c52c6cb3c70178312ffb6a251065098a410ba316e75a504880479844b2db22921367b9954b10c348c5c724a95b4a7711

  • SSDEEP

    1536:Qd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9Xwzb:QdseIOMEZEyFjEOFqTiQmOl/5xPvw/

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      ebaec2f032d7012d4e76cb591d4aa25503382fdb383db73be86f48941b935937

    • Size

      80KB

    • MD5

      97364296e4ee297b00f3c24ead1b0f21

    • SHA1

      69f10315ad5a4b3e60b28388cba3ef1a692a788d

    • SHA256

      ebaec2f032d7012d4e76cb591d4aa25503382fdb383db73be86f48941b935937

    • SHA512

      51427963e7bfcd5465b7ee0844f53928c52c6cb3c70178312ffb6a251065098a410ba316e75a504880479844b2db22921367b9954b10c348c5c724a95b4a7711

    • SSDEEP

      1536:Qd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9Xwzb:QdseIOMEZEyFjEOFqTiQmOl/5xPvw/

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks