General

  • Target

    d2347b0e067d43ada02a6fde570233354480245ca98b26eccd5b3c8abbb1c2d6

  • Size

    61KB

  • Sample

    250117-jy5wjaymdl

  • MD5

    06e5bf97166620194efbcad564c87bda

  • SHA1

    7933f8333bb7c6e0b7c4a72ec3202f89b76cf594

  • SHA256

    d2347b0e067d43ada02a6fde570233354480245ca98b26eccd5b3c8abbb1c2d6

  • SHA512

    46234f48c7967baa43536c4eec4ced38db191dc4346526d963b63895fdefa6a124c0a9e5f16ba43c4aa0638e08b6cd5106f4dc007a32f8ece24e5118f76533b3

  • SSDEEP

    1536:dd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ1l/5:VdseIOMEZEyFjEOFqTiQmXl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      d2347b0e067d43ada02a6fde570233354480245ca98b26eccd5b3c8abbb1c2d6

    • Size

      61KB

    • MD5

      06e5bf97166620194efbcad564c87bda

    • SHA1

      7933f8333bb7c6e0b7c4a72ec3202f89b76cf594

    • SHA256

      d2347b0e067d43ada02a6fde570233354480245ca98b26eccd5b3c8abbb1c2d6

    • SHA512

      46234f48c7967baa43536c4eec4ced38db191dc4346526d963b63895fdefa6a124c0a9e5f16ba43c4aa0638e08b6cd5106f4dc007a32f8ece24e5118f76533b3

    • SSDEEP

      1536:dd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ1l/5:VdseIOMEZEyFjEOFqTiQmXl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks