General

  • Target
    ef136d4fea4454662428a0867eb01120N.exe
  • Size 96KB
  • Sample240817-svdsbasfjf
  • SHA256 540065f21daa8861400dfcc1708907f265395d332165d8ceca39baea42600418
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • neconyd

C2
  • http://ow5dirasuek.com/

  • http://mkkuei4kdsz.com/

  • http://lousta.net/

Targets

    • Target
      ef136d4fea4454662428a0867eb01120N.exe
    • Size 96KB
    • SHA256 540065f21daa8861400dfcc1708907f265395d332165d8ceca39baea42600418
    • MD5 SHA1 SHA512 SSDEEP
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks