General

  • Target

    44d7f7aeb34e71ba2c682a02a7a8e3ee10853a3ee3da5da074d963198a920e13

  • Size

    72KB

  • Sample

    250111-26k57swmhk

  • MD5

    ce702c309268bd335ff5aed6ea8f642e

  • SHA1

    a510ea50a34d82557ddd10241ab76444285dd86f

  • SHA256

    44d7f7aeb34e71ba2c682a02a7a8e3ee10853a3ee3da5da074d963198a920e13

  • SHA512

    124dd45b960eb4113cd37556f59ac5750acce05150276c016650a385fd90411f0066e23b3ed489ed627be3989bb7216165a12e4a604efe51ef7be1347804ca17

  • SSDEEP

    1536:3d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211t:/dseIOMEZEyFjEOFqTiQm5l/5211t

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      44d7f7aeb34e71ba2c682a02a7a8e3ee10853a3ee3da5da074d963198a920e13

    • Size

      72KB

    • MD5

      ce702c309268bd335ff5aed6ea8f642e

    • SHA1

      a510ea50a34d82557ddd10241ab76444285dd86f

    • SHA256

      44d7f7aeb34e71ba2c682a02a7a8e3ee10853a3ee3da5da074d963198a920e13

    • SHA512

      124dd45b960eb4113cd37556f59ac5750acce05150276c016650a385fd90411f0066e23b3ed489ed627be3989bb7216165a12e4a604efe51ef7be1347804ca17

    • SSDEEP

      1536:3d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211t:/dseIOMEZEyFjEOFqTiQm5l/5211t

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks