General

  • Target

    1dda2a6f47afa6ff790b31b31cd90abb5d9987eb0ff8318fb48fa8dbe9e27207.exe

  • Size

    96KB

  • Sample

    241201-vsf6rswrbz

  • MD5

    84a9a10d1287fc1b9940e5ef1ceeb2cd

  • SHA1

    d5f9398706d2250e347fb8947e02a2ccf8fa1033

  • SHA256

    1dda2a6f47afa6ff790b31b31cd90abb5d9987eb0ff8318fb48fa8dbe9e27207

  • SHA512

    b4b5fef50de13fa51f28907c3933942a4351ec2afec60b4c46a9f5f25bca4665b708c5135148d587d41f0c32e341b66938ab754847b45dabc56e738da53923aa

  • SSDEEP

    1536:MnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxh:MGs8cd8eXlYairZYqMddH13h

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      1dda2a6f47afa6ff790b31b31cd90abb5d9987eb0ff8318fb48fa8dbe9e27207.exe

    • Size

      96KB

    • MD5

      84a9a10d1287fc1b9940e5ef1ceeb2cd

    • SHA1

      d5f9398706d2250e347fb8947e02a2ccf8fa1033

    • SHA256

      1dda2a6f47afa6ff790b31b31cd90abb5d9987eb0ff8318fb48fa8dbe9e27207

    • SHA512

      b4b5fef50de13fa51f28907c3933942a4351ec2afec60b4c46a9f5f25bca4665b708c5135148d587d41f0c32e341b66938ab754847b45dabc56e738da53923aa

    • SSDEEP

      1536:MnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxh:MGs8cd8eXlYairZYqMddH13h

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks