General

  • Target

    c8d24857d20b129b9a03b83bef5150bd5463918bfd56b879c1235590bbc2dff8N.exe

  • Size

    96KB

  • Sample

    241205-fvt33szpgs

  • MD5

    416900c00aff107ca4ebcb95c904ab90

  • SHA1

    e49f6e08bdec302e5de3e63bd9b7365c0ff9384b

  • SHA256

    c8d24857d20b129b9a03b83bef5150bd5463918bfd56b879c1235590bbc2dff8

  • SHA512

    5e315c2a28108a27942d29938de790f21247f968bac7c6230091f58f2342af30cde865e14eb9a3c52db0f14770b10db6854302182180a9208e23542e4485381e

  • SSDEEP

    1536:CnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:CGs8cd8eXlYairZYqMddH13L

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      c8d24857d20b129b9a03b83bef5150bd5463918bfd56b879c1235590bbc2dff8N.exe

    • Size

      96KB

    • MD5

      416900c00aff107ca4ebcb95c904ab90

    • SHA1

      e49f6e08bdec302e5de3e63bd9b7365c0ff9384b

    • SHA256

      c8d24857d20b129b9a03b83bef5150bd5463918bfd56b879c1235590bbc2dff8

    • SHA512

      5e315c2a28108a27942d29938de790f21247f968bac7c6230091f58f2342af30cde865e14eb9a3c52db0f14770b10db6854302182180a9208e23542e4485381e

    • SSDEEP

      1536:CnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:CGs8cd8eXlYairZYqMddH13L

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks