General

  • Target

    b480246bd25b419fe841a5156e0851d3817239270adad281a51351a01525240eN.exe

  • Size

    96KB

  • Sample

    241222-n9t1maxqcp

  • MD5

    3eb7248df35c054d346056f771ab83d0

  • SHA1

    f9746f6f83101432d6b81f169597116c9e74e815

  • SHA256

    b480246bd25b419fe841a5156e0851d3817239270adad281a51351a01525240e

  • SHA512

    1949f2bdd4d12d34f8f1a7f734abec83db0574cd88f0a82482e3a2f513f1962ca8627ce7d1ddd7fde92f5d5425faadcd4bf8b809d8f785b511ee34fc62617971

  • SSDEEP

    1536:unAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxp:uGs8cd8eXlYairZYqMddH13p

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      b480246bd25b419fe841a5156e0851d3817239270adad281a51351a01525240eN.exe

    • Size

      96KB

    • MD5

      3eb7248df35c054d346056f771ab83d0

    • SHA1

      f9746f6f83101432d6b81f169597116c9e74e815

    • SHA256

      b480246bd25b419fe841a5156e0851d3817239270adad281a51351a01525240e

    • SHA512

      1949f2bdd4d12d34f8f1a7f734abec83db0574cd88f0a82482e3a2f513f1962ca8627ce7d1ddd7fde92f5d5425faadcd4bf8b809d8f785b511ee34fc62617971

    • SSDEEP

      1536:unAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxp:uGs8cd8eXlYairZYqMddH13p

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks