General

  • Target

    0c476da180297e0c9d2ac21388c7fe58a44841cff88ca59ef42bae5329f5ecff

  • Size

    65KB

  • Sample

    250216-ye2gbswqgj

  • MD5

    6967e2a07acaca6967a3b07d36fcf6ce

  • SHA1

    3fb91fa9ff16e5fdfdcc36ce933a6abf23572651

  • SHA256

    0c476da180297e0c9d2ac21388c7fe58a44841cff88ca59ef42bae5329f5ecff

  • SHA512

    ebb98b7cde43517e4de1cc2e9fed43e90c304cb41b834f4b9a1a07bda5e041ec841a7c43dd8f79342556b46ead66e94cf0d9e722f5cab9cc2445b1014277ac57

  • SSDEEP

    1536:ud9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/Hzd:2dseIO+EZEyFjEOFqTiQmRHzd

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      0c476da180297e0c9d2ac21388c7fe58a44841cff88ca59ef42bae5329f5ecff

    • Size

      65KB

    • MD5

      6967e2a07acaca6967a3b07d36fcf6ce

    • SHA1

      3fb91fa9ff16e5fdfdcc36ce933a6abf23572651

    • SHA256

      0c476da180297e0c9d2ac21388c7fe58a44841cff88ca59ef42bae5329f5ecff

    • SHA512

      ebb98b7cde43517e4de1cc2e9fed43e90c304cb41b834f4b9a1a07bda5e041ec841a7c43dd8f79342556b46ead66e94cf0d9e722f5cab9cc2445b1014277ac57

    • SSDEEP

      1536:ud9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/Hzd:2dseIO+EZEyFjEOFqTiQmRHzd

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks