General

  • Target

    a48854c6df8ed4f5adc721e2160132756928fb3725f5babdd14bb0535f6deff6.exe

  • Size

    80KB

  • Sample

    250112-n6h4ystnhn

  • MD5

    069dad5b8bdad12163efc02202980084

  • SHA1

    8f78016b6151df0adea2e245dcfeb695bc8489aa

  • SHA256

    a48854c6df8ed4f5adc721e2160132756928fb3725f5babdd14bb0535f6deff6

  • SHA512

    c534c87d37c992de852caa3282d6bc1fac257a7bbef293c644d0e93bc20423b2cfd180d822321967a90dfe646528728a6f86e7b50af6e063f27c872c7f4cde9c

  • SSDEEP

    1536:ad9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzT:6dseIOMEZEyFjEOFqTiQmOl/5xPvwX

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      a48854c6df8ed4f5adc721e2160132756928fb3725f5babdd14bb0535f6deff6.exe

    • Size

      80KB

    • MD5

      069dad5b8bdad12163efc02202980084

    • SHA1

      8f78016b6151df0adea2e245dcfeb695bc8489aa

    • SHA256

      a48854c6df8ed4f5adc721e2160132756928fb3725f5babdd14bb0535f6deff6

    • SHA512

      c534c87d37c992de852caa3282d6bc1fac257a7bbef293c644d0e93bc20423b2cfd180d822321967a90dfe646528728a6f86e7b50af6e063f27c872c7f4cde9c

    • SSDEEP

      1536:ad9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzT:6dseIOMEZEyFjEOFqTiQmOl/5xPvwX

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks