General

  • Target

    706a452aa5efc63d4c65d4d4755675e3b92efd34f1eb6b236237e81846fa72fcN.exe

  • Size

    96KB

  • Sample

    241202-cnmhwayrfr

  • MD5

    42937ce35b7658b053cf8734ece52ff0

  • SHA1

    f888c23184de6dbcc4bbbf0e34c2b1fbc2262668

  • SHA256

    706a452aa5efc63d4c65d4d4755675e3b92efd34f1eb6b236237e81846fa72fc

  • SHA512

    6f2961584d83f371124b5983645d8fe5eeb148e3c5170c5f8506ed3b2fc28522f9ef5bbccb5274405b56d8cbf69d94ca75c05bebe9f0947d01ce04caf9e2b577

  • SSDEEP

    1536:lnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:lGs8cd8eXlYairZYqMddH13L

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      706a452aa5efc63d4c65d4d4755675e3b92efd34f1eb6b236237e81846fa72fcN.exe

    • Size

      96KB

    • MD5

      42937ce35b7658b053cf8734ece52ff0

    • SHA1

      f888c23184de6dbcc4bbbf0e34c2b1fbc2262668

    • SHA256

      706a452aa5efc63d4c65d4d4755675e3b92efd34f1eb6b236237e81846fa72fc

    • SHA512

      6f2961584d83f371124b5983645d8fe5eeb148e3c5170c5f8506ed3b2fc28522f9ef5bbccb5274405b56d8cbf69d94ca75c05bebe9f0947d01ce04caf9e2b577

    • SSDEEP

      1536:lnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:lGs8cd8eXlYairZYqMddH13L

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks