General

  • Target

    e0c43625ac24f5146667cb9245f25aa2257c234ede6abd81e47d268bc1f2dd5b.exe

  • Size

    72KB

  • Sample

    250116-jtpnrazpcs

  • MD5

    b9630713921daf210591c095fef95477

  • SHA1

    7c579ec9a1b6cef5319c2655601622066fe835e6

  • SHA256

    e0c43625ac24f5146667cb9245f25aa2257c234ede6abd81e47d268bc1f2dd5b

  • SHA512

    ad9a647e584f52044bf32d071b0f0a9989fdb4d5a214ce90a789adf1878deb32751e55c530b41b0b18e4969489b69ee06e257c042cf42054b60c1d91c590df96

  • SSDEEP

    1536:Pd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/52113:ndseIOMEZEyFjEOFqTiQm5l/52113

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      e0c43625ac24f5146667cb9245f25aa2257c234ede6abd81e47d268bc1f2dd5b.exe

    • Size

      72KB

    • MD5

      b9630713921daf210591c095fef95477

    • SHA1

      7c579ec9a1b6cef5319c2655601622066fe835e6

    • SHA256

      e0c43625ac24f5146667cb9245f25aa2257c234ede6abd81e47d268bc1f2dd5b

    • SHA512

      ad9a647e584f52044bf32d071b0f0a9989fdb4d5a214ce90a789adf1878deb32751e55c530b41b0b18e4969489b69ee06e257c042cf42054b60c1d91c590df96

    • SSDEEP

      1536:Pd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/52113:ndseIOMEZEyFjEOFqTiQm5l/52113

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks