General

  • Target

    e09aa83441a046d0ca45c65e39e2f7fbf591bbe77e1a4524c458385e6be8a559N.exe

  • Size

    80KB

  • Sample

    250120-eprv4azqdx

  • MD5

    57f5f9371c3958b32fc9aa2b935df480

  • SHA1

    40d2b22fe370d20e93dadf6d09683ac2d31f987b

  • SHA256

    e09aa83441a046d0ca45c65e39e2f7fbf591bbe77e1a4524c458385e6be8a559

  • SHA512

    9aead12a2521916681e1f68dcf244a1bcbb56cd454d39af0544d251eb7ed6bcf986973c6b2d0b4dc6884a87d1e531b3a34b4abbd4d2cf73d07680d373b2053c8

  • SSDEEP

    1536:7d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzB:LdseIOMEZEyFjEOFqTiQmOl/5xPvwN

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      e09aa83441a046d0ca45c65e39e2f7fbf591bbe77e1a4524c458385e6be8a559N.exe

    • Size

      80KB

    • MD5

      57f5f9371c3958b32fc9aa2b935df480

    • SHA1

      40d2b22fe370d20e93dadf6d09683ac2d31f987b

    • SHA256

      e09aa83441a046d0ca45c65e39e2f7fbf591bbe77e1a4524c458385e6be8a559

    • SHA512

      9aead12a2521916681e1f68dcf244a1bcbb56cd454d39af0544d251eb7ed6bcf986973c6b2d0b4dc6884a87d1e531b3a34b4abbd4d2cf73d07680d373b2053c8

    • SSDEEP

      1536:7d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzB:LdseIOMEZEyFjEOFqTiQmOl/5xPvwN

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks