General

  • Target

    fa56d5e7d6838bac9dfc8957e606e7a1deec9b03976282baddf6033c7b281755N.exe

  • Size

    96KB

  • Sample

    241222-rew4aazrg1

  • MD5

    b3ed9190eeb41cfeebf7fe819ebb0500

  • SHA1

    0720d3e3de08c0574e391dea8b49bd6ce3b1065b

  • SHA256

    fa56d5e7d6838bac9dfc8957e606e7a1deec9b03976282baddf6033c7b281755

  • SHA512

    b6a8d35dc333b4ebb3ab427fbc99612da1a87dbbc23333e564c779ad8824b9420aa415bf8b7c668c0c1710bd9aa17832361bf029d81da3c4d80485a3006ba8c0

  • SSDEEP

    1536:MnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:MGs8cd8eXlYairZYqMddH13L

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      fa56d5e7d6838bac9dfc8957e606e7a1deec9b03976282baddf6033c7b281755N.exe

    • Size

      96KB

    • MD5

      b3ed9190eeb41cfeebf7fe819ebb0500

    • SHA1

      0720d3e3de08c0574e391dea8b49bd6ce3b1065b

    • SHA256

      fa56d5e7d6838bac9dfc8957e606e7a1deec9b03976282baddf6033c7b281755

    • SHA512

      b6a8d35dc333b4ebb3ab427fbc99612da1a87dbbc23333e564c779ad8824b9420aa415bf8b7c668c0c1710bd9aa17832361bf029d81da3c4d80485a3006ba8c0

    • SSDEEP

      1536:MnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:MGs8cd8eXlYairZYqMddH13L

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks