General

  • Target

    17a8136b46cbccbf3609f1066575738a15ff57db8d1d3161990c7346630721f1.exe

  • Size

    96KB

  • Sample

    241222-afmgssvqbq

  • MD5

    ad73d2201f360c25e7612bc3ab68f355

  • SHA1

    060583de7be589a37eebd08a5c64b6172a59e799

  • SHA256

    17a8136b46cbccbf3609f1066575738a15ff57db8d1d3161990c7346630721f1

  • SHA512

    ac018c0ca1e805172197d75ba9bcde9d6267e048d53c7f815b230e61378cf632064270b4025061bc60c68836fc78475066089ce381141bf08acb98af72db94ec

  • SSDEEP

    1536:unAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxR:uGs8cd8eXlYairZYqMddH13R

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      17a8136b46cbccbf3609f1066575738a15ff57db8d1d3161990c7346630721f1.exe

    • Size

      96KB

    • MD5

      ad73d2201f360c25e7612bc3ab68f355

    • SHA1

      060583de7be589a37eebd08a5c64b6172a59e799

    • SHA256

      17a8136b46cbccbf3609f1066575738a15ff57db8d1d3161990c7346630721f1

    • SHA512

      ac018c0ca1e805172197d75ba9bcde9d6267e048d53c7f815b230e61378cf632064270b4025061bc60c68836fc78475066089ce381141bf08acb98af72db94ec

    • SSDEEP

      1536:unAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxR:uGs8cd8eXlYairZYqMddH13R

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks