General

  • Target

    6badad65fb6dc8b0a2cc91c483e2d41a5d7acbf8a2b8591c8e0cb9bf580b29ca.exe

  • Size

    80KB

  • Sample

    241230-ywzztswqcp

  • MD5

    2c6d907a021a3e632cd126097530db07

  • SHA1

    091240037a81704fa68ad25dfcde053c137056f4

  • SHA256

    6badad65fb6dc8b0a2cc91c483e2d41a5d7acbf8a2b8591c8e0cb9bf580b29ca

  • SHA512

    2d60a2ab443835480d52fb54a9396e29e3dab742c6f7b815ff1b28e9781c6eaa36ce1f05e340a2d42d777e493ce7c0b2f19695ee78b837a344d655d5f045d137

  • SSDEEP

    1536:7d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9Xwzb:LdseIOMEZEyFjEOFqTiQmOl/5xPvw/

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      6badad65fb6dc8b0a2cc91c483e2d41a5d7acbf8a2b8591c8e0cb9bf580b29ca.exe

    • Size

      80KB

    • MD5

      2c6d907a021a3e632cd126097530db07

    • SHA1

      091240037a81704fa68ad25dfcde053c137056f4

    • SHA256

      6badad65fb6dc8b0a2cc91c483e2d41a5d7acbf8a2b8591c8e0cb9bf580b29ca

    • SHA512

      2d60a2ab443835480d52fb54a9396e29e3dab742c6f7b815ff1b28e9781c6eaa36ce1f05e340a2d42d777e493ce7c0b2f19695ee78b837a344d655d5f045d137

    • SSDEEP

      1536:7d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9Xwzb:LdseIOMEZEyFjEOFqTiQmOl/5xPvw/

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks