General

  • Target

    f4bf44219aa89fd1cad096bb332bc4f7fb5d1e34322d5745b23710b69ce30f47

  • Size

    76KB

  • Sample

    250115-mhk3zaznew

  • MD5

    3ec6bfba8944e2ba6b17cd488ec7eb17

  • SHA1

    a290ba70e0fbb91ae287404f7eca37cbedca849f

  • SHA256

    f4bf44219aa89fd1cad096bb332bc4f7fb5d1e34322d5745b23710b69ce30f47

  • SHA512

    d49d13ea2fcd6366c402feab6a25f5218282f05cdeda11ace102b7d9217d0b4f64d61affca9b9e3799b57fed643fd585a963d01584e2caefd7970582fc4a55f3

  • SSDEEP

    1536:1d9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w11H:9dseIOMEZEyFjEOFqaiQm5l/5w11H

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      f4bf44219aa89fd1cad096bb332bc4f7fb5d1e34322d5745b23710b69ce30f47

    • Size

      76KB

    • MD5

      3ec6bfba8944e2ba6b17cd488ec7eb17

    • SHA1

      a290ba70e0fbb91ae287404f7eca37cbedca849f

    • SHA256

      f4bf44219aa89fd1cad096bb332bc4f7fb5d1e34322d5745b23710b69ce30f47

    • SHA512

      d49d13ea2fcd6366c402feab6a25f5218282f05cdeda11ace102b7d9217d0b4f64d61affca9b9e3799b57fed643fd585a963d01584e2caefd7970582fc4a55f3

    • SSDEEP

      1536:1d9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w11H:9dseIOMEZEyFjEOFqaiQm5l/5w11H

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks