General

  • Target

    1c0cc28b0b839ac95595a0950d20fd4c4a03c1104b314d03929578623d08e266

  • Size

    71KB

  • Sample

    250120-z7qqzazlgk

  • MD5

    59a8c47d53f2ac3614624307d509b36c

  • SHA1

    a832daf4677363d58130efedade6ae57ea54f042

  • SHA256

    1c0cc28b0b839ac95595a0950d20fd4c4a03c1104b314d03929578623d08e266

  • SHA512

    80d9d7a03444bd38187a26b84280306b5e33d71792d8aa4b3e1a3c9a9e36dc5879fed294eb09359d18fe073c3f947eaeb9bb9ddeffc128ce7854f1c3ea572c46

  • SSDEEP

    1536:Ld9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbHX:7dseIOMEZEyFjEOFqTiQmQDHIbHX

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      1c0cc28b0b839ac95595a0950d20fd4c4a03c1104b314d03929578623d08e266

    • Size

      71KB

    • MD5

      59a8c47d53f2ac3614624307d509b36c

    • SHA1

      a832daf4677363d58130efedade6ae57ea54f042

    • SHA256

      1c0cc28b0b839ac95595a0950d20fd4c4a03c1104b314d03929578623d08e266

    • SHA512

      80d9d7a03444bd38187a26b84280306b5e33d71792d8aa4b3e1a3c9a9e36dc5879fed294eb09359d18fe073c3f947eaeb9bb9ddeffc128ce7854f1c3ea572c46

    • SSDEEP

      1536:Ld9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbHX:7dseIOMEZEyFjEOFqTiQmQDHIbHX

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks