General

  • Target

    f415a9ac440615626abc26beeb5ffe0ca3647b9a5c9d549a102cda5ceeeac60f

  • Size

    64KB

  • Sample

    250218-jn5g1szn15

  • MD5

    69f7cc6fd27e49643574afd0a282bbb8

  • SHA1

    27fc663276af53968eee2628bd12596696200bfd

  • SHA256

    f415a9ac440615626abc26beeb5ffe0ca3647b9a5c9d549a102cda5ceeeac60f

  • SHA512

    6e995f9342b251bfb45b9a883fb9f9842df6f7d6da0dfb6067b269e60c9f09d1390edc894385a679c1db8c22761ee357ced0d7f3c184bc3c0cc27ce3d484a477

  • SSDEEP

    768:jMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uAH:jbIvYvZEyFKF6N4yS+AQmZcl/5f

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      f415a9ac440615626abc26beeb5ffe0ca3647b9a5c9d549a102cda5ceeeac60f

    • Size

      64KB

    • MD5

      69f7cc6fd27e49643574afd0a282bbb8

    • SHA1

      27fc663276af53968eee2628bd12596696200bfd

    • SHA256

      f415a9ac440615626abc26beeb5ffe0ca3647b9a5c9d549a102cda5ceeeac60f

    • SHA512

      6e995f9342b251bfb45b9a883fb9f9842df6f7d6da0dfb6067b269e60c9f09d1390edc894385a679c1db8c22761ee357ced0d7f3c184bc3c0cc27ce3d484a477

    • SSDEEP

      768:jMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uAH:jbIvYvZEyFKF6N4yS+AQmZcl/5f

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks