General

  • Target

    6efa63841489e7447c94debcbddac71bb973e16204e3334542bff3b6cd004a0c

  • Size

    96KB

  • Sample

    241216-3jgpyatlaz

  • MD5

    83f7b311b9ecda871573dcf6e7440124

  • SHA1

    0416d1d3ca34bc17eea652db45f47e492ce0afb0

  • SHA256

    6efa63841489e7447c94debcbddac71bb973e16204e3334542bff3b6cd004a0c

  • SHA512

    9305f3e807816b7f333b183b1b2887798f2cde555c99a50915c75f5de4121c9647888ea7d49e300834904e72126e537ed5f62b249d8f08e234255588f8a62e79

  • SSDEEP

    1536:jnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxa:jGs8cd8eXlYairZYqMddH13a

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      6efa63841489e7447c94debcbddac71bb973e16204e3334542bff3b6cd004a0c

    • Size

      96KB

    • MD5

      83f7b311b9ecda871573dcf6e7440124

    • SHA1

      0416d1d3ca34bc17eea652db45f47e492ce0afb0

    • SHA256

      6efa63841489e7447c94debcbddac71bb973e16204e3334542bff3b6cd004a0c

    • SHA512

      9305f3e807816b7f333b183b1b2887798f2cde555c99a50915c75f5de4121c9647888ea7d49e300834904e72126e537ed5f62b249d8f08e234255588f8a62e79

    • SSDEEP

      1536:jnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxa:jGs8cd8eXlYairZYqMddH13a

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks