General

  • Target

    07c100fe82fc9a1daa572541fce94c1c28b4140fc320cb82f17765d171d6134dN.exe

  • Size

    96KB

  • Sample

    241125-15fzeswlbq

  • MD5

    f730fb740380db58182f7a76198e38a0

  • SHA1

    84038a943d448d5e121329485bc14675d1c942a8

  • SHA256

    07c100fe82fc9a1daa572541fce94c1c28b4140fc320cb82f17765d171d6134d

  • SHA512

    1da37b61664fb960ec7a58b66225f902a386695a1696f09f76e22ccec2e89348ad54a867e9a41391b0100b7b377f53a65739f4fa0965398b2b99bfc171cc5226

  • SSDEEP

    1536:TnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:TGs8cd8eXlYairZYqMddH13L

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      07c100fe82fc9a1daa572541fce94c1c28b4140fc320cb82f17765d171d6134dN.exe

    • Size

      96KB

    • MD5

      f730fb740380db58182f7a76198e38a0

    • SHA1

      84038a943d448d5e121329485bc14675d1c942a8

    • SHA256

      07c100fe82fc9a1daa572541fce94c1c28b4140fc320cb82f17765d171d6134d

    • SHA512

      1da37b61664fb960ec7a58b66225f902a386695a1696f09f76e22ccec2e89348ad54a867e9a41391b0100b7b377f53a65739f4fa0965398b2b99bfc171cc5226

    • SSDEEP

      1536:TnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:TGs8cd8eXlYairZYqMddH13L

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks