General

  • Target

    c6b26075ec0e704915a1a6569da784da2cd033a3c8e82df9a88638f205928730

  • Size

    61KB

  • Sample

    250122-kpkpnsylhl

  • MD5

    5abcdf729097346ef78f2f0de622e985

  • SHA1

    f8c651f1f42bfdae19805eedb6a8ed143c51e99f

  • SHA256

    c6b26075ec0e704915a1a6569da784da2cd033a3c8e82df9a88638f205928730

  • SHA512

    1751a20c427b07e6728fe761762fd6240a15725866fedee9e922948e5ae1dd04d16a136df9fc5a16061cd64734e2dd6eb52b1bd95f504bf5e950c9c18c77ce0b

  • SSDEEP

    1536:kd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZEl/5:cdseIOMEZEyFjEOFqTiQmCl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      c6b26075ec0e704915a1a6569da784da2cd033a3c8e82df9a88638f205928730

    • Size

      61KB

    • MD5

      5abcdf729097346ef78f2f0de622e985

    • SHA1

      f8c651f1f42bfdae19805eedb6a8ed143c51e99f

    • SHA256

      c6b26075ec0e704915a1a6569da784da2cd033a3c8e82df9a88638f205928730

    • SHA512

      1751a20c427b07e6728fe761762fd6240a15725866fedee9e922948e5ae1dd04d16a136df9fc5a16061cd64734e2dd6eb52b1bd95f504bf5e950c9c18c77ce0b

    • SSDEEP

      1536:kd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZEl/5:cdseIOMEZEyFjEOFqTiQmCl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks