General

  • Target

    97b7f6d840980c909d3333098f12e66b63766baab2abcc539fb95fcb61006925N.exe

  • Size

    96KB

  • Sample

    241202-fmzzcswlhp

  • MD5

    76ca67702b82a2fb7cc03651373091c0

  • SHA1

    a18e4a787959e1c36cb601b9e07111e735840d77

  • SHA256

    97b7f6d840980c909d3333098f12e66b63766baab2abcc539fb95fcb61006925

  • SHA512

    3ce9cfa9bf7367885d495df1c746544176c13b85230db7b390b468f32c9e1841a1479e0ed05ec318e08293a86f453ecd38a0a65a2368f30a7f2aa1b6622fb59e

  • SSDEEP

    1536:BnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxR:BGs8cd8eXlYairZYqMddH13R

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      97b7f6d840980c909d3333098f12e66b63766baab2abcc539fb95fcb61006925N.exe

    • Size

      96KB

    • MD5

      76ca67702b82a2fb7cc03651373091c0

    • SHA1

      a18e4a787959e1c36cb601b9e07111e735840d77

    • SHA256

      97b7f6d840980c909d3333098f12e66b63766baab2abcc539fb95fcb61006925

    • SHA512

      3ce9cfa9bf7367885d495df1c746544176c13b85230db7b390b468f32c9e1841a1479e0ed05ec318e08293a86f453ecd38a0a65a2368f30a7f2aa1b6622fb59e

    • SSDEEP

      1536:BnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxR:BGs8cd8eXlYairZYqMddH13R

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks