General

  • Target

    269197fcebf553dac1bb0f65600619a4a2b11bba023511abe61cb028e8c7e422

  • Size

    65KB

  • Sample

    250121-1z7vystnfr

  • MD5

    12837701a685d2ba352082487de57f85

  • SHA1

    0d292469a0d5ee7cddb0ab8fe184bc22b9cab876

  • SHA256

    269197fcebf553dac1bb0f65600619a4a2b11bba023511abe61cb028e8c7e422

  • SHA512

    ed2347e9ee9115a39bfff507ca665b655fc2e41dc2b9c6ef703afe13108964cd9da76d79cc71fbf4fa1ad0a522bba81f0a402fe315f76be6bce003ebf48c0356

  • SSDEEP

    1536:Ud9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/Hzl:sdseIO+EZEyFjEOFqTiQmRHzl

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      269197fcebf553dac1bb0f65600619a4a2b11bba023511abe61cb028e8c7e422

    • Size

      65KB

    • MD5

      12837701a685d2ba352082487de57f85

    • SHA1

      0d292469a0d5ee7cddb0ab8fe184bc22b9cab876

    • SHA256

      269197fcebf553dac1bb0f65600619a4a2b11bba023511abe61cb028e8c7e422

    • SHA512

      ed2347e9ee9115a39bfff507ca665b655fc2e41dc2b9c6ef703afe13108964cd9da76d79cc71fbf4fa1ad0a522bba81f0a402fe315f76be6bce003ebf48c0356

    • SSDEEP

      1536:Ud9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/Hzl:sdseIO+EZEyFjEOFqTiQmRHzl

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks