General

  • Target

    9242f1437d4f1dcf393a27bf0a6e25380e19e86d0018869859da2ce7d17bd47cN.exe

  • Size

    71KB

  • Sample

    250104-h73l4ayphs

  • MD5

    e5624d03db381476ac0aad0da9dab750

  • SHA1

    9557736089d8ff16ccf68b96f38f9b7c2e71b06e

  • SHA256

    9242f1437d4f1dcf393a27bf0a6e25380e19e86d0018869859da2ce7d17bd47c

  • SHA512

    a9aa3529b92d65fe03e663b033c0bc865354e654727ab42b0fa8e7b09325008e5e5ac2b6ba362e2a0409c15e70a4013c5775618956043b733fcc07d917ea0cb3

  • SSDEEP

    1536:zd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbH:zdseIOMEZEyFjEOFqTiQmQDHIbH

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      9242f1437d4f1dcf393a27bf0a6e25380e19e86d0018869859da2ce7d17bd47cN.exe

    • Size

      71KB

    • MD5

      e5624d03db381476ac0aad0da9dab750

    • SHA1

      9557736089d8ff16ccf68b96f38f9b7c2e71b06e

    • SHA256

      9242f1437d4f1dcf393a27bf0a6e25380e19e86d0018869859da2ce7d17bd47c

    • SHA512

      a9aa3529b92d65fe03e663b033c0bc865354e654727ab42b0fa8e7b09325008e5e5ac2b6ba362e2a0409c15e70a4013c5775618956043b733fcc07d917ea0cb3

    • SSDEEP

      1536:zd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbH:zdseIOMEZEyFjEOFqTiQmQDHIbH

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks