General

  • Target

    09e1ed4843058435cd7808472345cf25cebc13bad0bc7eb343c4629a1a8d4433.exe

  • Size

    61KB

  • Sample

    250208-hm6s1ssqap

  • MD5

    9eadd2f05a2e7f9a08411bcd7682c2a5

  • SHA1

    687fef93bbcf9ee18129b98ad9c448f1b8a54009

  • SHA256

    09e1ed4843058435cd7808472345cf25cebc13bad0bc7eb343c4629a1a8d4433

  • SHA512

    b45a5a65df0b58f09b5d8037aa4fcd464319be4f75bb254bdc23f48c69254012b2e0fc462fcd4e5471233bc824a211dacc3f992b1cac5ae7c61e1d8d7ebba41d

  • SSDEEP

    1536:Gd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZxl/5v:+dseIOMEZEyFjEOFqTiQmTl/5v

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      09e1ed4843058435cd7808472345cf25cebc13bad0bc7eb343c4629a1a8d4433.exe

    • Size

      61KB

    • MD5

      9eadd2f05a2e7f9a08411bcd7682c2a5

    • SHA1

      687fef93bbcf9ee18129b98ad9c448f1b8a54009

    • SHA256

      09e1ed4843058435cd7808472345cf25cebc13bad0bc7eb343c4629a1a8d4433

    • SHA512

      b45a5a65df0b58f09b5d8037aa4fcd464319be4f75bb254bdc23f48c69254012b2e0fc462fcd4e5471233bc824a211dacc3f992b1cac5ae7c61e1d8d7ebba41d

    • SSDEEP

      1536:Gd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZxl/5v:+dseIOMEZEyFjEOFqTiQmTl/5v

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks