General

  • Target

    ce0a433f67215ca5029a690c00df619ad4d2340bae15a6644e35efe068b6b245.exe

  • Size

    65KB

  • Sample

    250208-e19v2swphn

  • MD5

    e079554ae472591cfa93b55e24a35c22

  • SHA1

    25b557229676cabfce708cd879fea2ddb87e7ed7

  • SHA256

    ce0a433f67215ca5029a690c00df619ad4d2340bae15a6644e35efe068b6b245

  • SHA512

    c894860f4443486f6ea086bab4f0d13f20823228dfbe560a9fb409c575d1afff12ae42112078567aed450785b31f223e6d9ec7a85daaf626b0d02f5c7d54509c

  • SSDEEP

    1536:md9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/HzF:edseIO+EZEyFjEOFqTiQmRHzF

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      ce0a433f67215ca5029a690c00df619ad4d2340bae15a6644e35efe068b6b245.exe

    • Size

      65KB

    • MD5

      e079554ae472591cfa93b55e24a35c22

    • SHA1

      25b557229676cabfce708cd879fea2ddb87e7ed7

    • SHA256

      ce0a433f67215ca5029a690c00df619ad4d2340bae15a6644e35efe068b6b245

    • SHA512

      c894860f4443486f6ea086bab4f0d13f20823228dfbe560a9fb409c575d1afff12ae42112078567aed450785b31f223e6d9ec7a85daaf626b0d02f5c7d54509c

    • SSDEEP

      1536:md9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/HzF:edseIO+EZEyFjEOFqTiQmRHzF

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks