General

  • Target

    1d6e570f8dcf2a02d1d1585fed62e5d44402633d6054fed95f1097db3542ff08

  • Size

    80KB

  • Sample

    250115-zv5dlawnap

  • MD5

    b0ef11bf09c019fa8d2e5122ee68d450

  • SHA1

    5c8ed771b867951c04292faa15a7a9921ee5d739

  • SHA256

    1d6e570f8dcf2a02d1d1585fed62e5d44402633d6054fed95f1097db3542ff08

  • SHA512

    0dbd02f777e92b95421e08dca4129094900877b1894b2d732b76de8b64ca600e77854247da755b6c1743b63a2d025b671a932ae8553c73215bfddea98b6415bc

  • SSDEEP

    768:XfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAK:XfbIvYvZEyFKF6N4yS+AQmZTl/5S

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      1d6e570f8dcf2a02d1d1585fed62e5d44402633d6054fed95f1097db3542ff08

    • Size

      80KB

    • MD5

      b0ef11bf09c019fa8d2e5122ee68d450

    • SHA1

      5c8ed771b867951c04292faa15a7a9921ee5d739

    • SHA256

      1d6e570f8dcf2a02d1d1585fed62e5d44402633d6054fed95f1097db3542ff08

    • SHA512

      0dbd02f777e92b95421e08dca4129094900877b1894b2d732b76de8b64ca600e77854247da755b6c1743b63a2d025b671a932ae8553c73215bfddea98b6415bc

    • SSDEEP

      768:XfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAK:XfbIvYvZEyFKF6N4yS+AQmZTl/5S

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks