General

  • Target

    a50868a33b92fa41f64f53507edc04a16621c8b26b9a7493954bb6a8dae95115.exe

  • Size

    96KB

  • Sample

    241202-f74s2s1rbz

  • MD5

    69fb77d843534d1472a385245398dafc

  • SHA1

    75877faa1f0af52e1421f6a1e7d354677ac7a7c6

  • SHA256

    a50868a33b92fa41f64f53507edc04a16621c8b26b9a7493954bb6a8dae95115

  • SHA512

    079432c632d2b33f20fa8133f6282d56e5ae73271ba7ae716649e5fb243482777df227d35f3beb8dd09f084ee627d6993ee824fb68a973db7817c8a44b9b0e98

  • SSDEEP

    1536:UnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxx:UGs8cd8eXlYairZYqMddH13x

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      a50868a33b92fa41f64f53507edc04a16621c8b26b9a7493954bb6a8dae95115.exe

    • Size

      96KB

    • MD5

      69fb77d843534d1472a385245398dafc

    • SHA1

      75877faa1f0af52e1421f6a1e7d354677ac7a7c6

    • SHA256

      a50868a33b92fa41f64f53507edc04a16621c8b26b9a7493954bb6a8dae95115

    • SHA512

      079432c632d2b33f20fa8133f6282d56e5ae73271ba7ae716649e5fb243482777df227d35f3beb8dd09f084ee627d6993ee824fb68a973db7817c8a44b9b0e98

    • SSDEEP

      1536:UnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxx:UGs8cd8eXlYairZYqMddH13x

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks