General

  • Target

    764113b926fee9a741c7029d91574f7ba428089e4a6e40f62bad10175400627e.exe

  • Size

    96KB

  • Sample

    241205-s6t9faxjhj

  • MD5

    07b7492e8fbdce79ab235211e06b1e73

  • SHA1

    6ba6a7862a0b42f343deb2872ca599e1d41fdef3

  • SHA256

    764113b926fee9a741c7029d91574f7ba428089e4a6e40f62bad10175400627e

  • SHA512

    8360139355212aaed503ec588d0ea1c1d3bc9c67f953ccf28d3c446ddb483f837b23591d79feedeca88135daa268d4fa9fc3f470a175c8ea59c92406434527bd

  • SSDEEP

    1536:UnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxO:UGs8cd8eXlYairZYqMddH13O

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      764113b926fee9a741c7029d91574f7ba428089e4a6e40f62bad10175400627e.exe

    • Size

      96KB

    • MD5

      07b7492e8fbdce79ab235211e06b1e73

    • SHA1

      6ba6a7862a0b42f343deb2872ca599e1d41fdef3

    • SHA256

      764113b926fee9a741c7029d91574f7ba428089e4a6e40f62bad10175400627e

    • SHA512

      8360139355212aaed503ec588d0ea1c1d3bc9c67f953ccf28d3c446ddb483f837b23591d79feedeca88135daa268d4fa9fc3f470a175c8ea59c92406434527bd

    • SSDEEP

      1536:UnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxO:UGs8cd8eXlYairZYqMddH13O

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks