General

  • Target

    c6164c96940570a1e87dbdbc91c615e79af75379007f3246135b587386089426

  • Size

    89KB

  • Sample

    250115-jgkh9svrfy

  • MD5

    74e3d8a305751a63ac4b15e00fc256f8

  • SHA1

    e98f0a50e1b7017270537a1262a76a353be283fd

  • SHA256

    c6164c96940570a1e87dbdbc91c615e79af75379007f3246135b587386089426

  • SHA512

    decf2cc0505f0c26c5408b3b8cfec436c97869ad33e58fe5d9e4d9ceea4b761c3a3414fde0c85e7b8491d4c54b3109b87806672b82fc1c165e5ce680aa6118ea

  • SSDEEP

    768:tMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA1:tbIvYvZEyFKF6N4yS+AQmZTl/5d

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      c6164c96940570a1e87dbdbc91c615e79af75379007f3246135b587386089426

    • Size

      89KB

    • MD5

      74e3d8a305751a63ac4b15e00fc256f8

    • SHA1

      e98f0a50e1b7017270537a1262a76a353be283fd

    • SHA256

      c6164c96940570a1e87dbdbc91c615e79af75379007f3246135b587386089426

    • SHA512

      decf2cc0505f0c26c5408b3b8cfec436c97869ad33e58fe5d9e4d9ceea4b761c3a3414fde0c85e7b8491d4c54b3109b87806672b82fc1c165e5ce680aa6118ea

    • SSDEEP

      768:tMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA1:tbIvYvZEyFKF6N4yS+AQmZTl/5d

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks