General

  • Target

    adf89b423ff93c7c6d744feccf8c23313e7a6af8e456458e4f38a0b37befeed1

  • Size

    61KB

  • Sample

    250120-k3yhpaskdm

  • MD5

    5cece95a926ddd025e3a97cf5a13f044

  • SHA1

    0dec504f3b3526292722672d8105e1a90e7cb246

  • SHA256

    adf89b423ff93c7c6d744feccf8c23313e7a6af8e456458e4f38a0b37befeed1

  • SHA512

    fbe55158701e977c27f2c65c839554399b8413ffaa61b12df70cfae4aa6643025db412ca7b5bcae2e28c7b4e091bcfbdfdebc80459070b44ed8692fec947055f

  • SSDEEP

    1536:hd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ1l/5:RdseIOMEZEyFjEOFqTiQmXl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      adf89b423ff93c7c6d744feccf8c23313e7a6af8e456458e4f38a0b37befeed1

    • Size

      61KB

    • MD5

      5cece95a926ddd025e3a97cf5a13f044

    • SHA1

      0dec504f3b3526292722672d8105e1a90e7cb246

    • SHA256

      adf89b423ff93c7c6d744feccf8c23313e7a6af8e456458e4f38a0b37befeed1

    • SHA512

      fbe55158701e977c27f2c65c839554399b8413ffaa61b12df70cfae4aa6643025db412ca7b5bcae2e28c7b4e091bcfbdfdebc80459070b44ed8692fec947055f

    • SSDEEP

      1536:hd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ1l/5:RdseIOMEZEyFjEOFqTiQmXl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks