General

  • Target

    caa7bdf03729ac5ad10f7df1824b7ef70e9f331aeda2e74dae38a341bd693baa.exe

  • Size

    96KB

  • Sample

    250112-zr4b5aypgt

  • MD5

    2a21bd3663b336a53fb6610a5a68e495

  • SHA1

    0bc123eb9012c2257ccce0b0a261a520fdaa2da5

  • SHA256

    caa7bdf03729ac5ad10f7df1824b7ef70e9f331aeda2e74dae38a341bd693baa

  • SHA512

    a00dae5aa007358aeec244faa7aa9a982c149c3eeb60caa1d2f875391aafc3f7846c5dbe8a4b429da72d3924ce796152786f80be0447f224ea5a264d5471ff64

  • SSDEEP

    1536:/nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxz:/Gs8cd8eXlYairZYqMddH13z

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      caa7bdf03729ac5ad10f7df1824b7ef70e9f331aeda2e74dae38a341bd693baa.exe

    • Size

      96KB

    • MD5

      2a21bd3663b336a53fb6610a5a68e495

    • SHA1

      0bc123eb9012c2257ccce0b0a261a520fdaa2da5

    • SHA256

      caa7bdf03729ac5ad10f7df1824b7ef70e9f331aeda2e74dae38a341bd693baa

    • SHA512

      a00dae5aa007358aeec244faa7aa9a982c149c3eeb60caa1d2f875391aafc3f7846c5dbe8a4b429da72d3924ce796152786f80be0447f224ea5a264d5471ff64

    • SSDEEP

      1536:/nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxz:/Gs8cd8eXlYairZYqMddH13z

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks