General

  • Target

    35daebc18d2dfcdab4860b6a46e77543a6dbc15266cbce56f1eddd0d9cf92ba7.exe

  • Size

    96KB

  • Sample

    241201-zrj89a1qby

  • MD5

    dc7b5a6970fe25bf8c35b5a2272eb185

  • SHA1

    377eee11a6e2edddffad09045bc0e9c8bde897ed

  • SHA256

    35daebc18d2dfcdab4860b6a46e77543a6dbc15266cbce56f1eddd0d9cf92ba7

  • SHA512

    5146149efc2fab9810b074781c1bc16a7e1ae549ba7a9dd7e10de7376ec556661615ddc1554f91e80e02635645c415b8c8dcaacf74885d3937dc4b9c23032507

  • SSDEEP

    1536:FnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxr:FGs8cd8eXlYairZYqMddH13r

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      35daebc18d2dfcdab4860b6a46e77543a6dbc15266cbce56f1eddd0d9cf92ba7.exe

    • Size

      96KB

    • MD5

      dc7b5a6970fe25bf8c35b5a2272eb185

    • SHA1

      377eee11a6e2edddffad09045bc0e9c8bde897ed

    • SHA256

      35daebc18d2dfcdab4860b6a46e77543a6dbc15266cbce56f1eddd0d9cf92ba7

    • SHA512

      5146149efc2fab9810b074781c1bc16a7e1ae549ba7a9dd7e10de7376ec556661615ddc1554f91e80e02635645c415b8c8dcaacf74885d3937dc4b9c23032507

    • SSDEEP

      1536:FnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxr:FGs8cd8eXlYairZYqMddH13r

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks