General

  • Target

    53830929eb3f46fd39cbc200c7702d44b7234d097b0886b165880c79bd1b11edN.exe

  • Size

    96KB

  • Sample

    241205-kqpp1sxkcv

  • MD5

    7a1f296dd107b7200ebce0ab57a125f0

  • SHA1

    b47b2496d02dec987babb68206da19aeb3f2ae62

  • SHA256

    53830929eb3f46fd39cbc200c7702d44b7234d097b0886b165880c79bd1b11ed

  • SHA512

    920ac4be7a4b5802a8cf31653963a6d0eda57b11daa05907f405975497b2cd4d73278151ac62b4a025757412beec9e31af118ea892f7b7ed16ae6e42ee7b7221

  • SSDEEP

    1536:TnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxh:TGs8cd8eXlYairZYqMddH13h

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      53830929eb3f46fd39cbc200c7702d44b7234d097b0886b165880c79bd1b11edN.exe

    • Size

      96KB

    • MD5

      7a1f296dd107b7200ebce0ab57a125f0

    • SHA1

      b47b2496d02dec987babb68206da19aeb3f2ae62

    • SHA256

      53830929eb3f46fd39cbc200c7702d44b7234d097b0886b165880c79bd1b11ed

    • SHA512

      920ac4be7a4b5802a8cf31653963a6d0eda57b11daa05907f405975497b2cd4d73278151ac62b4a025757412beec9e31af118ea892f7b7ed16ae6e42ee7b7221

    • SSDEEP

      1536:TnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxh:TGs8cd8eXlYairZYqMddH13h

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks