General

  • Target

    4f6052ae72b632ec6423f2237b599eb93ec605b68f69005ea3c7d8eb5307308d

  • Size

    89KB

  • Sample

    250111-3rxfcsxmdk

  • MD5

    69c5169baa9780b5e5b62c91577950f6

  • SHA1

    7f9c4ca75619783d4b255b692d5f2c0a70c80ad5

  • SHA256

    4f6052ae72b632ec6423f2237b599eb93ec605b68f69005ea3c7d8eb5307308d

  • SHA512

    5d8a9b219f6e7eb5f88fbf760ffa649184d6d95b46774e922f0154b43502dc4269bb0198847340caf2f11aaacb86faa8b0ab368873c095ac3c3c5b1984b5e900

  • SSDEEP

    768:7MEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA/:7bIvYvZEyFKF6N4yS+AQmZTl/53

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      4f6052ae72b632ec6423f2237b599eb93ec605b68f69005ea3c7d8eb5307308d

    • Size

      89KB

    • MD5

      69c5169baa9780b5e5b62c91577950f6

    • SHA1

      7f9c4ca75619783d4b255b692d5f2c0a70c80ad5

    • SHA256

      4f6052ae72b632ec6423f2237b599eb93ec605b68f69005ea3c7d8eb5307308d

    • SHA512

      5d8a9b219f6e7eb5f88fbf760ffa649184d6d95b46774e922f0154b43502dc4269bb0198847340caf2f11aaacb86faa8b0ab368873c095ac3c3c5b1984b5e900

    • SSDEEP

      768:7MEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA/:7bIvYvZEyFKF6N4yS+AQmZTl/53

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks