General

  • Target

    2ede8ef105302b288369be1ee291e700N.exe

  • Size

    96KB

  • Sample

    240820-spegnayfqg

  • MD5

    2ede8ef105302b288369be1ee291e700

  • SHA1

    0fcb410d4452dba879b558cb031d746a28712f27

  • SHA256

    1f5c4d010092ca58e65530fef541c1160a237618ebc32dea755418fe3b004931

  • SHA512

    955b036f9f3446f2a611004cbb7103d1bfac83abc815502fe5ea8fae7ac6474568915feb518be67ff1c5c6be00695958e9f7472e17db1757e0dc9e8a8d6b71d5

  • SSDEEP

    1536:KnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:KGs8cd8eXlYairZYqMddH13L

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      2ede8ef105302b288369be1ee291e700N.exe

    • Size

      96KB

    • MD5

      2ede8ef105302b288369be1ee291e700

    • SHA1

      0fcb410d4452dba879b558cb031d746a28712f27

    • SHA256

      1f5c4d010092ca58e65530fef541c1160a237618ebc32dea755418fe3b004931

    • SHA512

      955b036f9f3446f2a611004cbb7103d1bfac83abc815502fe5ea8fae7ac6474568915feb518be67ff1c5c6be00695958e9f7472e17db1757e0dc9e8a8d6b71d5

    • SSDEEP

      1536:KnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:KGs8cd8eXlYairZYqMddH13L

    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks