General

  • Target

    47e9b0ca9d0475e7ad980646da0548f9574d4f85835fc5459256b4232f9260a6

  • Size

    61KB

  • Sample

    250115-3vnmma1rdq

  • MD5

    8b3e6e6a31fb8844e093e4cd4921895a

  • SHA1

    427f5a5d8e5ce3a2c6526c19cbc07a5c7db004c9

  • SHA256

    47e9b0ca9d0475e7ad980646da0548f9574d4f85835fc5459256b4232f9260a6

  • SHA512

    f300b4c2249658c1a403bf8e6210b70bfc8e449d1461424d0a6b0b3fac5c9d96f21ada30817977f563237554df353ac2d50441edd0d670c8432e07df12f5daab

  • SSDEEP

    1536:Dd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ1l/5:jdseIOMEZEyFjEOFqTiQmXl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      47e9b0ca9d0475e7ad980646da0548f9574d4f85835fc5459256b4232f9260a6

    • Size

      61KB

    • MD5

      8b3e6e6a31fb8844e093e4cd4921895a

    • SHA1

      427f5a5d8e5ce3a2c6526c19cbc07a5c7db004c9

    • SHA256

      47e9b0ca9d0475e7ad980646da0548f9574d4f85835fc5459256b4232f9260a6

    • SHA512

      f300b4c2249658c1a403bf8e6210b70bfc8e449d1461424d0a6b0b3fac5c9d96f21ada30817977f563237554df353ac2d50441edd0d670c8432e07df12f5daab

    • SSDEEP

      1536:Dd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ1l/5:jdseIOMEZEyFjEOFqTiQmXl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks