General

  • Target

    6bdb76e1a57330a4fb810513ac91a197e6d66763c11cc979788dda75a4212a70N.exe

  • Size

    65KB

  • Sample

    250121-k9v15swnbz

  • MD5

    967d66a4fe4c892c456e5b311c9f8030

  • SHA1

    737f06df05b84c744cac6f17ad38ed01a8e543ce

  • SHA256

    6bdb76e1a57330a4fb810513ac91a197e6d66763c11cc979788dda75a4212a70

  • SHA512

    57cbc624688ac0abbfa21e9c6ec5979d5e177929a9d22f7c20bea7be9771b9a119f4c608ada98646ab6bcdd9e2c506b76562503c80aaaa6c7b878ae9ab56397c

  • SSDEEP

    1536:Td9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/Hz:TdseIO+EZEyFjEOFqTiQmRHz

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      6bdb76e1a57330a4fb810513ac91a197e6d66763c11cc979788dda75a4212a70N.exe

    • Size

      65KB

    • MD5

      967d66a4fe4c892c456e5b311c9f8030

    • SHA1

      737f06df05b84c744cac6f17ad38ed01a8e543ce

    • SHA256

      6bdb76e1a57330a4fb810513ac91a197e6d66763c11cc979788dda75a4212a70

    • SHA512

      57cbc624688ac0abbfa21e9c6ec5979d5e177929a9d22f7c20bea7be9771b9a119f4c608ada98646ab6bcdd9e2c506b76562503c80aaaa6c7b878ae9ab56397c

    • SSDEEP

      1536:Td9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/Hz:TdseIO+EZEyFjEOFqTiQmRHz

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks