General

  • Target

    9e4f8f1c77a6f54e1e546ff028d75e12a38218adb65789908660ba903724a903N.exe

  • Size

    61KB

  • Sample

    250120-ww31daslg1

  • MD5

    0ae69dcd82d19b6198b367d47664d750

  • SHA1

    2fdcf486e68cfe5f84bcc8ef8f1fc465606b59ec

  • SHA256

    9e4f8f1c77a6f54e1e546ff028d75e12a38218adb65789908660ba903724a903

  • SHA512

    21a751134ba8eaad85cb87800100a4ba0cc92b89a060efbd276f29d005c9d1ed229389b73cbb18970bb902f47d638fd7d58b5c77de4fe4a31197166a2dd82044

  • SSDEEP

    1536:cd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZjl/5:kdseIOMEZEyFjEOFqTiQmxl/5

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      9e4f8f1c77a6f54e1e546ff028d75e12a38218adb65789908660ba903724a903N.exe

    • Size

      61KB

    • MD5

      0ae69dcd82d19b6198b367d47664d750

    • SHA1

      2fdcf486e68cfe5f84bcc8ef8f1fc465606b59ec

    • SHA256

      9e4f8f1c77a6f54e1e546ff028d75e12a38218adb65789908660ba903724a903

    • SHA512

      21a751134ba8eaad85cb87800100a4ba0cc92b89a060efbd276f29d005c9d1ed229389b73cbb18970bb902f47d638fd7d58b5c77de4fe4a31197166a2dd82044

    • SSDEEP

      1536:cd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZjl/5:kdseIOMEZEyFjEOFqTiQmxl/5

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks