General

  • Target

    e07000219d5f7df830d1e1fd05e160872ec0530ad4472713f9136f5076903a90N.exe

  • Size

    80KB

  • Sample

    241203-wc4skawmbw

  • MD5

    227e53f0ecbc0c1e7cdf9c00ef1fec50

  • SHA1

    b52435e2b680c2ac4f6a81ba5fa14154c62346b4

  • SHA256

    e07000219d5f7df830d1e1fd05e160872ec0530ad4472713f9136f5076903a90

  • SHA512

    272e81a405148b4e91b5461543a112e2ff84ccdd3bbdce9e79112543b710ebed59718c0152125698406cc619e16bc314f5dea561369c1fb6e8263a663bb6cac8

  • SSDEEP

    1536:Pd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzT:ndseIOMEZEyFjEOFqTiQmOl/5xPvwX

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      e07000219d5f7df830d1e1fd05e160872ec0530ad4472713f9136f5076903a90N.exe

    • Size

      80KB

    • MD5

      227e53f0ecbc0c1e7cdf9c00ef1fec50

    • SHA1

      b52435e2b680c2ac4f6a81ba5fa14154c62346b4

    • SHA256

      e07000219d5f7df830d1e1fd05e160872ec0530ad4472713f9136f5076903a90

    • SHA512

      272e81a405148b4e91b5461543a112e2ff84ccdd3bbdce9e79112543b710ebed59718c0152125698406cc619e16bc314f5dea561369c1fb6e8263a663bb6cac8

    • SSDEEP

      1536:Pd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzT:ndseIOMEZEyFjEOFqTiQmOl/5xPvwX

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks