General

  • Target

    f98c30c5f635a5075d54bd4b9874f3bd8f76f786ec859101088d907227ace94e.exe

  • Size

    96KB

  • Sample

    241203-y5xaasxqej

  • MD5

    381d0ec608a380f4b48868c4af1b0b28

  • SHA1

    79ac26cc0f0d0cc441a0214c134721eff7fc39e8

  • SHA256

    f98c30c5f635a5075d54bd4b9874f3bd8f76f786ec859101088d907227ace94e

  • SHA512

    b085738ea1ab4eac1ea0551cb119d7ade8fcb1d6b584a0177274f14120566d56ed3bb9bcb3c41c81a23fe4041bc81ef3b30dcf8019a3620ec121dd3705256e46

  • SSDEEP

    1536:anAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxa:aGs8cd8eXlYairZYqMddH13a

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      f98c30c5f635a5075d54bd4b9874f3bd8f76f786ec859101088d907227ace94e.exe

    • Size

      96KB

    • MD5

      381d0ec608a380f4b48868c4af1b0b28

    • SHA1

      79ac26cc0f0d0cc441a0214c134721eff7fc39e8

    • SHA256

      f98c30c5f635a5075d54bd4b9874f3bd8f76f786ec859101088d907227ace94e

    • SHA512

      b085738ea1ab4eac1ea0551cb119d7ade8fcb1d6b584a0177274f14120566d56ed3bb9bcb3c41c81a23fe4041bc81ef3b30dcf8019a3620ec121dd3705256e46

    • SSDEEP

      1536:anAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxa:aGs8cd8eXlYairZYqMddH13a

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks