General

  • Target

    6f13e6496c204a1292f80acf695631f0526d04870ce34afa68b791aec22082ab.exe

  • Size

    65KB

  • Sample

    250122-gk3g5s1paw

  • MD5

    bb250af5f098117ea109a96e7335ec27

  • SHA1

    6e7ef84c96da818949bae42abf5c10ae5746a38e

  • SHA256

    6f13e6496c204a1292f80acf695631f0526d04870ce34afa68b791aec22082ab

  • SHA512

    0e4ed40a1ee54127ccefa7776e4a655b3119383c591da05f2ce9663cf4c294b9d9873e3cee06547a5c5f5f3a959f14d795730777eba4198675736dabe46af7d2

  • SSDEEP

    1536:hd9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/HzX:RdseIO+EZEyFjEOFqTiQmRHzX

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      6f13e6496c204a1292f80acf695631f0526d04870ce34afa68b791aec22082ab.exe

    • Size

      65KB

    • MD5

      bb250af5f098117ea109a96e7335ec27

    • SHA1

      6e7ef84c96da818949bae42abf5c10ae5746a38e

    • SHA256

      6f13e6496c204a1292f80acf695631f0526d04870ce34afa68b791aec22082ab

    • SHA512

      0e4ed40a1ee54127ccefa7776e4a655b3119383c591da05f2ce9663cf4c294b9d9873e3cee06547a5c5f5f3a959f14d795730777eba4198675736dabe46af7d2

    • SSDEEP

      1536:hd9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/HzX:RdseIO+EZEyFjEOFqTiQmRHzX

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks