General

  • Target

    51c684b237d58f6ebd59af80bdc9521ebf1541e4e1324b9ee9faaffe09bb44ec

  • Size

    72KB

  • Sample

    250112-315hbsykcn

  • MD5

    049420ef9cd7519cca3e7b4ef872ba11

  • SHA1

    99d71c4fb1a25113dacc590ca25af52cf534217b

  • SHA256

    51c684b237d58f6ebd59af80bdc9521ebf1541e4e1324b9ee9faaffe09bb44ec

  • SHA512

    e0fef17b7f58687e8b127f3e4e0cd8d5af5c4e42df154a37d36410305ac23ac8e939aab1ef1e653d53dad50287615bfc48ac6f8e97bf8a3105736383e7e50b91

  • SSDEEP

    1536:fd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/52111:XdseIOMEZEyFjEOFqTiQm5l/52111

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      51c684b237d58f6ebd59af80bdc9521ebf1541e4e1324b9ee9faaffe09bb44ec

    • Size

      72KB

    • MD5

      049420ef9cd7519cca3e7b4ef872ba11

    • SHA1

      99d71c4fb1a25113dacc590ca25af52cf534217b

    • SHA256

      51c684b237d58f6ebd59af80bdc9521ebf1541e4e1324b9ee9faaffe09bb44ec

    • SHA512

      e0fef17b7f58687e8b127f3e4e0cd8d5af5c4e42df154a37d36410305ac23ac8e939aab1ef1e653d53dad50287615bfc48ac6f8e97bf8a3105736383e7e50b91

    • SSDEEP

      1536:fd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/52111:XdseIOMEZEyFjEOFqTiQm5l/52111

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks