General

  • Target

    e0d18faff83390d3ba33c78308833b9476866efa2d23662fa2571d79796702d0N.exe

  • Size

    61KB

  • Sample

    241129-pesdzszjgl

  • MD5

    d907e95a690863a63feddc08d2580e20

  • SHA1

    1591cd3fdb03853f41a11c86b1135aa9adb1be88

  • SHA256

    e0d18faff83390d3ba33c78308833b9476866efa2d23662fa2571d79796702d0

  • SHA512

    e4fb0181c9fb9a04e3595b73742fdde16841592ea50b1dc50a52e2f25350cb83ea3a295a0d369bc5d1610c0455f4a3921c1fc60111a2bf21b3219cdadf238471

  • SSDEEP

    768:zMEIvFGvZEr8LFK0ic46N47eSdYAHwmZ7Bp6JXXlaa5uA:zbIvYvZEyFKF6N4yS+AQmZIl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      e0d18faff83390d3ba33c78308833b9476866efa2d23662fa2571d79796702d0N.exe

    • Size

      61KB

    • MD5

      d907e95a690863a63feddc08d2580e20

    • SHA1

      1591cd3fdb03853f41a11c86b1135aa9adb1be88

    • SHA256

      e0d18faff83390d3ba33c78308833b9476866efa2d23662fa2571d79796702d0

    • SHA512

      e4fb0181c9fb9a04e3595b73742fdde16841592ea50b1dc50a52e2f25350cb83ea3a295a0d369bc5d1610c0455f4a3921c1fc60111a2bf21b3219cdadf238471

    • SSDEEP

      768:zMEIvFGvZEr8LFK0ic46N47eSdYAHwmZ7Bp6JXXlaa5uA:zbIvYvZEyFKF6N4yS+AQmZIl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks