General

  • Target

    7591c03af22b1830f46fa67da59a16c6977a9bad8637732fa49d551b6690ba97N.exe

  • Size

    134KB

  • Sample

    250104-bvldqatmhz

  • MD5

    f3236833d3d417f40dd700787185aab0

  • SHA1

    e684ee297a24a73109418bca4c6e97e40ab0d0c3

  • SHA256

    7591c03af22b1830f46fa67da59a16c6977a9bad8637732fa49d551b6690ba97

  • SHA512

    4e4303106ed847d1f34da5b58d63d83bc75160a589365ce975c2cfa834d7d792b42b1e9d39f6772933fb4cf00a26ee71e8c7faf964b3270cc726a064079b88d6

  • SSDEEP

    1536:zDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCi9:/iRTeH0iqAW6J6f1tqF6dngNmaZCiaI

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      7591c03af22b1830f46fa67da59a16c6977a9bad8637732fa49d551b6690ba97N.exe

    • Size

      134KB

    • MD5

      f3236833d3d417f40dd700787185aab0

    • SHA1

      e684ee297a24a73109418bca4c6e97e40ab0d0c3

    • SHA256

      7591c03af22b1830f46fa67da59a16c6977a9bad8637732fa49d551b6690ba97

    • SHA512

      4e4303106ed847d1f34da5b58d63d83bc75160a589365ce975c2cfa834d7d792b42b1e9d39f6772933fb4cf00a26ee71e8c7faf964b3270cc726a064079b88d6

    • SSDEEP

      1536:zDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCi9:/iRTeH0iqAW6J6f1tqF6dngNmaZCiaI

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks