General

  • Target

    0d18ad9c113116ec1983be25cc5847505f4be932013364012fbc834cb70fd839N.exe

  • Size

    96KB

  • Sample

    250112-t26x4szlfz

  • MD5

    c5061cb02f8a9fcac28699f7c5af3940

  • SHA1

    b6a76e05979acb92f7c77e81104666f8b98ea78e

  • SHA256

    0d18ad9c113116ec1983be25cc5847505f4be932013364012fbc834cb70fd839

  • SHA512

    e00b41cb1ad5a2bfcf87af437d78ceb8258b4ab327a7ce44b868f5c791b88ed11af1e17bb8357a8a1c6110c5eba345376065a7945388f7a19800bfe297d40ce6

  • SSDEEP

    1536:/nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxz:/Gs8cd8eXlYairZYqMddH13z

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      0d18ad9c113116ec1983be25cc5847505f4be932013364012fbc834cb70fd839N.exe

    • Size

      96KB

    • MD5

      c5061cb02f8a9fcac28699f7c5af3940

    • SHA1

      b6a76e05979acb92f7c77e81104666f8b98ea78e

    • SHA256

      0d18ad9c113116ec1983be25cc5847505f4be932013364012fbc834cb70fd839

    • SHA512

      e00b41cb1ad5a2bfcf87af437d78ceb8258b4ab327a7ce44b868f5c791b88ed11af1e17bb8357a8a1c6110c5eba345376065a7945388f7a19800bfe297d40ce6

    • SSDEEP

      1536:/nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxz:/Gs8cd8eXlYairZYqMddH13z

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks