General

  • Target

    ef876d4528e399a528fdbf22eeeb581e49d65a113bb945b15cea48da574fd424N.exe

  • Size

    96KB

  • Sample

    241126-cnc97svqfj

  • MD5

    04563d75fcecf3eae1cc9006ac989ae0

  • SHA1

    530f41c66f2c034780188d32d1caccfaa73613e3

  • SHA256

    ef876d4528e399a528fdbf22eeeb581e49d65a113bb945b15cea48da574fd424

  • SHA512

    156d89ff1ac103cc7294223d4dc23a44ac2c192990c36be7de47e75304376078903f7cd569d2f1d95af184a82a1e287258ce8133b78c9b193bfd0d8506635cbc

  • SSDEEP

    1536:QnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:QGs8cd8eXlYairZYqMddH13L

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      ef876d4528e399a528fdbf22eeeb581e49d65a113bb945b15cea48da574fd424N.exe

    • Size

      96KB

    • MD5

      04563d75fcecf3eae1cc9006ac989ae0

    • SHA1

      530f41c66f2c034780188d32d1caccfaa73613e3

    • SHA256

      ef876d4528e399a528fdbf22eeeb581e49d65a113bb945b15cea48da574fd424

    • SHA512

      156d89ff1ac103cc7294223d4dc23a44ac2c192990c36be7de47e75304376078903f7cd569d2f1d95af184a82a1e287258ce8133b78c9b193bfd0d8506635cbc

    • SSDEEP

      1536:QnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:QGs8cd8eXlYairZYqMddH13L

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks