General

  • Target

    94035503f1f7c74d5b472826d91427fbe8070d789a82a749b4e10d8953675209

  • Size

    80KB

  • Sample

    250128-bbwqca1pdt

  • MD5

    894262470ec2d9f77994e9f2bb2c4aa9

  • SHA1

    b8f803e1f56c5c15132414a12cc563459e178013

  • SHA256

    94035503f1f7c74d5b472826d91427fbe8070d789a82a749b4e10d8953675209

  • SHA512

    38eb54f81db4b0c9c84c3f1521ed976306de1ae0815a414fe3a8443aeb51867f52aaa84789fd074a3bb76c50d6163d057d98cd6b1e0a277171e84a55f9f68e98

  • SSDEEP

    768:qfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAK:qfbIvYvZEyFKF6N4yS+AQmZTl/5S

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      94035503f1f7c74d5b472826d91427fbe8070d789a82a749b4e10d8953675209

    • Size

      80KB

    • MD5

      894262470ec2d9f77994e9f2bb2c4aa9

    • SHA1

      b8f803e1f56c5c15132414a12cc563459e178013

    • SHA256

      94035503f1f7c74d5b472826d91427fbe8070d789a82a749b4e10d8953675209

    • SHA512

      38eb54f81db4b0c9c84c3f1521ed976306de1ae0815a414fe3a8443aeb51867f52aaa84789fd074a3bb76c50d6163d057d98cd6b1e0a277171e84a55f9f68e98

    • SSDEEP

      768:qfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAK:qfbIvYvZEyFKF6N4yS+AQmZTl/5S

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks