General

  • Target

    d250b89085e8576f4e882ef4f376d8c7a2226dc451ccd2ec73e57b924edea636.exe

  • Size

    96KB

  • Sample

    250108-ldke7swnfl

  • MD5

    471f49e3fe485b7ed02e5a754744f855

  • SHA1

    23b95ccf3e5a579680dad54f63148b1a66d7a0f4

  • SHA256

    d250b89085e8576f4e882ef4f376d8c7a2226dc451ccd2ec73e57b924edea636

  • SHA512

    bba8483e9704f18381404d1ea94899277bb0c9a5c1dd90725655582674c54d3811b4c4504356611e699c36274d0b75c4e0742b003b65af7126eb840894a041ef

  • SSDEEP

    1536:vnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxx:vGs8cd8eXlYairZYqMddH13x

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      d250b89085e8576f4e882ef4f376d8c7a2226dc451ccd2ec73e57b924edea636.exe

    • Size

      96KB

    • MD5

      471f49e3fe485b7ed02e5a754744f855

    • SHA1

      23b95ccf3e5a579680dad54f63148b1a66d7a0f4

    • SHA256

      d250b89085e8576f4e882ef4f376d8c7a2226dc451ccd2ec73e57b924edea636

    • SHA512

      bba8483e9704f18381404d1ea94899277bb0c9a5c1dd90725655582674c54d3811b4c4504356611e699c36274d0b75c4e0742b003b65af7126eb840894a041ef

    • SSDEEP

      1536:vnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxx:vGs8cd8eXlYairZYqMddH13x

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks