General

  • Target

    afc86eadd84cdb3bc80f8b84eec0831a80711e0afe2f9cb1877134758a51f8ec

  • Size

    80KB

  • Sample

    250218-e9rqtsxmcl

  • MD5

    5f37185a894e45cbde1eed03f43d8ddd

  • SHA1

    b199139af55a447b1ff2a4f8bf7d7085ac2035ea

  • SHA256

    afc86eadd84cdb3bc80f8b84eec0831a80711e0afe2f9cb1877134758a51f8ec

  • SHA512

    bde058e8bd10231e12572536fdd6a8c47798df152d7ce518498fd843df6158c1eec6dcd5b274b70e1736d54ad51dc11c76c8cdfd7062e056c438f6e7a749706d

  • SSDEEP

    1536:jd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzB:DdseIOMEZEyFjEOFqTiQmOl/5xPvwN

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      afc86eadd84cdb3bc80f8b84eec0831a80711e0afe2f9cb1877134758a51f8ec

    • Size

      80KB

    • MD5

      5f37185a894e45cbde1eed03f43d8ddd

    • SHA1

      b199139af55a447b1ff2a4f8bf7d7085ac2035ea

    • SHA256

      afc86eadd84cdb3bc80f8b84eec0831a80711e0afe2f9cb1877134758a51f8ec

    • SHA512

      bde058e8bd10231e12572536fdd6a8c47798df152d7ce518498fd843df6158c1eec6dcd5b274b70e1736d54ad51dc11c76c8cdfd7062e056c438f6e7a749706d

    • SSDEEP

      1536:jd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzB:DdseIOMEZEyFjEOFqTiQmOl/5xPvwN

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks