General

  • Target

    fcb2a7077fae9a4924d783f7cc711fb173a01a4ebe441a47662a5c942fe27362

  • Size

    88KB

  • Sample

    250115-m7gf3s1lfs

  • MD5

    089bc9c981a81ab3357819a123e11bf0

  • SHA1

    387367183e3447e5bc9cb0cb05fd59cbe7631baf

  • SHA256

    fcb2a7077fae9a4924d783f7cc711fb173a01a4ebe441a47662a5c942fe27362

  • SHA512

    74938d6acf14e1f50f1d254e5de8dc19af4559b7cd11ee0a8a8e00a2ac488656862bcee8f931295febbc6476fe53718beccaf9f87a96a2ee0b2b4b7bae509209

  • SSDEEP

    1536:hd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5h:RdseIOMEZEyFjEOFqTiQm5l/5h

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      fcb2a7077fae9a4924d783f7cc711fb173a01a4ebe441a47662a5c942fe27362

    • Size

      88KB

    • MD5

      089bc9c981a81ab3357819a123e11bf0

    • SHA1

      387367183e3447e5bc9cb0cb05fd59cbe7631baf

    • SHA256

      fcb2a7077fae9a4924d783f7cc711fb173a01a4ebe441a47662a5c942fe27362

    • SHA512

      74938d6acf14e1f50f1d254e5de8dc19af4559b7cd11ee0a8a8e00a2ac488656862bcee8f931295febbc6476fe53718beccaf9f87a96a2ee0b2b4b7bae509209

    • SSDEEP

      1536:hd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5h:RdseIOMEZEyFjEOFqTiQm5l/5h

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks