General

  • Target

    fe87538f8e8429649c2a6b7e22a389efeff25c7b94095970cf12641accfc294b

  • Size

    61KB

  • Sample

    250223-jctw5s1n15

  • MD5

    129708678f272403847bbe3d31c9c0eb

  • SHA1

    3257a9b3bd1818353bb1875ce44b9425542cafd9

  • SHA256

    fe87538f8e8429649c2a6b7e22a389efeff25c7b94095970cf12641accfc294b

  • SHA512

    7ff5dbab00104061702f76684d19890255b02d30e9c1ea90b705d7620854e28d139e2f42258b8cf13ec4a402cb38692ee3a264c3aff3b142adabc628dbedaf1a

  • SSDEEP

    768:HMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:HbIvYvZEyFKF6N4yS+AQmZTl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      fe87538f8e8429649c2a6b7e22a389efeff25c7b94095970cf12641accfc294b

    • Size

      61KB

    • MD5

      129708678f272403847bbe3d31c9c0eb

    • SHA1

      3257a9b3bd1818353bb1875ce44b9425542cafd9

    • SHA256

      fe87538f8e8429649c2a6b7e22a389efeff25c7b94095970cf12641accfc294b

    • SHA512

      7ff5dbab00104061702f76684d19890255b02d30e9c1ea90b705d7620854e28d139e2f42258b8cf13ec4a402cb38692ee3a264c3aff3b142adabc628dbedaf1a

    • SSDEEP

      768:HMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:HbIvYvZEyFKF6N4yS+AQmZTl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks