General

  • Target

    469a77e3f5fef3c474a7acc25c4f55f62d4272574ae293ebc9a7fee2db15fe4c.exe

  • Size

    80KB

  • Sample

    250107-1cv8mszjfv

  • MD5

    2209e6abb473b890cb413f8a02d969e8

  • SHA1

    370459728393e67bb3416dd7f418613699b9ab92

  • SHA256

    469a77e3f5fef3c474a7acc25c4f55f62d4272574ae293ebc9a7fee2db15fe4c

  • SHA512

    4dcd5aca3fe607a66b4628ca550a6dd697150b81f24a58368855662e99ffc29419b33766a2c98b89d8c629803fbefd4054f3015af52f15ed34a1f3341e7a4a86

  • SSDEEP

    1536:cd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzB:kdseIOMEZEyFjEOFqTiQmOl/5xPvwN

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      469a77e3f5fef3c474a7acc25c4f55f62d4272574ae293ebc9a7fee2db15fe4c.exe

    • Size

      80KB

    • MD5

      2209e6abb473b890cb413f8a02d969e8

    • SHA1

      370459728393e67bb3416dd7f418613699b9ab92

    • SHA256

      469a77e3f5fef3c474a7acc25c4f55f62d4272574ae293ebc9a7fee2db15fe4c

    • SHA512

      4dcd5aca3fe607a66b4628ca550a6dd697150b81f24a58368855662e99ffc29419b33766a2c98b89d8c629803fbefd4054f3015af52f15ed34a1f3341e7a4a86

    • SSDEEP

      1536:cd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzB:kdseIOMEZEyFjEOFqTiQmOl/5xPvwN

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks