General

  • Target

    5b5d09986c62f72b5ce9ce8e89f901f7908170a6e1899822ba09c324986646a5N.exe

  • Size

    96KB

  • Sample

    241130-ftvm8atpfv

  • MD5

    73c8725f4cc2e9353e25fc29ba382050

  • SHA1

    38a31f74e6df578a4fbce4169bec50937fb85708

  • SHA256

    5b5d09986c62f72b5ce9ce8e89f901f7908170a6e1899822ba09c324986646a5

  • SHA512

    bd23f2b3995b41c450a3ba1a8b9d610bd37894afbe1e160086a93dbe213a903233523bcadc4b779eadb8aa042a2d000ad7ee241eac586e03021b214c5c96991c

  • SSDEEP

    1536:6nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxq:6Gs8cd8eXlYairZYqMddH13q

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      5b5d09986c62f72b5ce9ce8e89f901f7908170a6e1899822ba09c324986646a5N.exe

    • Size

      96KB

    • MD5

      73c8725f4cc2e9353e25fc29ba382050

    • SHA1

      38a31f74e6df578a4fbce4169bec50937fb85708

    • SHA256

      5b5d09986c62f72b5ce9ce8e89f901f7908170a6e1899822ba09c324986646a5

    • SHA512

      bd23f2b3995b41c450a3ba1a8b9d610bd37894afbe1e160086a93dbe213a903233523bcadc4b779eadb8aa042a2d000ad7ee241eac586e03021b214c5c96991c

    • SSDEEP

      1536:6nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxq:6Gs8cd8eXlYairZYqMddH13q

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks