General

  • Target

    6f9b3a2b5396a661f1b197fdceb44356efafe40452dbad3d7f533ea3c56afa4cN.exe

  • Size

    33KB

  • Sample

    250111-hle9nszjfv

  • MD5

    6f107f9388e03d5e39dc8906e8366f80

  • SHA1

    5954de46cc556f71eed5d3567fa1016f749a604b

  • SHA256

    6f9b3a2b5396a661f1b197fdceb44356efafe40452dbad3d7f533ea3c56afa4c

  • SHA512

    cd9e8f20d6daa33d1f60edcfdcfedd501aee6c9514aa53c26cfba4e6d089d9d8d410cc4a7de41c26a6841caff394b267b8248764abf4dbb11dd6b608b7c54038

  • SSDEEP

    768:0fVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7D:0fVRztyHo8QNHTk0qE5fslvN/956q

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      6f9b3a2b5396a661f1b197fdceb44356efafe40452dbad3d7f533ea3c56afa4cN.exe

    • Size

      33KB

    • MD5

      6f107f9388e03d5e39dc8906e8366f80

    • SHA1

      5954de46cc556f71eed5d3567fa1016f749a604b

    • SHA256

      6f9b3a2b5396a661f1b197fdceb44356efafe40452dbad3d7f533ea3c56afa4c

    • SHA512

      cd9e8f20d6daa33d1f60edcfdcfedd501aee6c9514aa53c26cfba4e6d089d9d8d410cc4a7de41c26a6841caff394b267b8248764abf4dbb11dd6b608b7c54038

    • SSDEEP

      768:0fVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7D:0fVRztyHo8QNHTk0qE5fslvN/956q

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks