General

  • Target

    b2962cf9b86a136790359f6c49096c8505f83dc44defdd34284b69b025e46fb8

  • Size

    76KB

  • Sample

    250116-g1jd7sxlgk

  • MD5

    7558ffb530e028c740a509698c85c257

  • SHA1

    4d716b78cf0fb491b10e7523b51f793f69d7ab6f

  • SHA256

    b2962cf9b86a136790359f6c49096c8505f83dc44defdd34284b69b025e46fb8

  • SHA512

    13aca0ec59c3a1d9c0f117f63d8dd62040df2580f88721246a1ce0511afc344e64dc49c18ddf32ced7ba0b4d36639949fdbc37790d767f25a05d20f4d3af0182

  • SSDEEP

    768:BMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAWZ:BbIvYvZEyFKF6N4yS+AQmZTl/5OZ

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      b2962cf9b86a136790359f6c49096c8505f83dc44defdd34284b69b025e46fb8

    • Size

      76KB

    • MD5

      7558ffb530e028c740a509698c85c257

    • SHA1

      4d716b78cf0fb491b10e7523b51f793f69d7ab6f

    • SHA256

      b2962cf9b86a136790359f6c49096c8505f83dc44defdd34284b69b025e46fb8

    • SHA512

      13aca0ec59c3a1d9c0f117f63d8dd62040df2580f88721246a1ce0511afc344e64dc49c18ddf32ced7ba0b4d36639949fdbc37790d767f25a05d20f4d3af0182

    • SSDEEP

      768:BMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAWZ:BbIvYvZEyFKF6N4yS+AQmZTl/5OZ

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks