General

  • Target

    80751f1e20437b84e93053d24566a52076b9d61465e3b59d3e6627ae1756f12a.exe

  • Size

    96KB

  • Sample

    241225-sva2eswrhm

  • MD5

    59ede50b044e7f3ffd426ea37c7ec221

  • SHA1

    bb29aa3c358decf7da5040882309011f20f3eeec

  • SHA256

    80751f1e20437b84e93053d24566a52076b9d61465e3b59d3e6627ae1756f12a

  • SHA512

    4d41db7101616917dd0d228e649bb2615ef5b13561c5b909faac2304878116f680dc7b4ff724b321c876025c13961846c52f3d750448d87b508ef46916126b9b

  • SSDEEP

    1536:2nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxb:2Gs8cd8eXlYairZYqMddH13b

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      80751f1e20437b84e93053d24566a52076b9d61465e3b59d3e6627ae1756f12a.exe

    • Size

      96KB

    • MD5

      59ede50b044e7f3ffd426ea37c7ec221

    • SHA1

      bb29aa3c358decf7da5040882309011f20f3eeec

    • SHA256

      80751f1e20437b84e93053d24566a52076b9d61465e3b59d3e6627ae1756f12a

    • SHA512

      4d41db7101616917dd0d228e649bb2615ef5b13561c5b909faac2304878116f680dc7b4ff724b321c876025c13961846c52f3d750448d87b508ef46916126b9b

    • SSDEEP

      1536:2nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxb:2Gs8cd8eXlYairZYqMddH13b

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks