General

  • Target

    f71f2f2c75f9e22858abc833abd93039047bbd5d0636dd1b01c5ad6a5b12ae81N.exe

  • Size

    96KB

  • Sample

    250103-xkjyss1kdk

  • MD5

    40cf1e628a5f14faf8c6c86e3f115e70

  • SHA1

    01311d9bf7b7c4488c0e077a18574802f6cbba42

  • SHA256

    f71f2f2c75f9e22858abc833abd93039047bbd5d0636dd1b01c5ad6a5b12ae81

  • SHA512

    b981edc39123459dc1a240b6bd5958e917f6f1d0f943adb7bd051fec0028369d31345983248ce2d3a3d05ea943bc994cebb4dad7afa028f1fca4cb4209f24011

  • SSDEEP

    1536:knAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxz:kGs8cd8eXlYairZYqMddH13z

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      f71f2f2c75f9e22858abc833abd93039047bbd5d0636dd1b01c5ad6a5b12ae81N.exe

    • Size

      96KB

    • MD5

      40cf1e628a5f14faf8c6c86e3f115e70

    • SHA1

      01311d9bf7b7c4488c0e077a18574802f6cbba42

    • SHA256

      f71f2f2c75f9e22858abc833abd93039047bbd5d0636dd1b01c5ad6a5b12ae81

    • SHA512

      b981edc39123459dc1a240b6bd5958e917f6f1d0f943adb7bd051fec0028369d31345983248ce2d3a3d05ea943bc994cebb4dad7afa028f1fca4cb4209f24011

    • SSDEEP

      1536:knAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxz:kGs8cd8eXlYairZYqMddH13z

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks