General

  • Target

    bbabd4ebfd6c8f5f61a32fbd69096592a74d8599583007748a2ffe9604c94832N

  • Size

    96KB

  • Sample

    250113-jxchlatnbx

  • MD5

    baef7c20c5e18a5657edb38c27e150d0

  • SHA1

    7128a13c102608f7521d8749eb55f39190c87262

  • SHA256

    bbabd4ebfd6c8f5f61a32fbd69096592a74d8599583007748a2ffe9604c94832

  • SHA512

    62680aaf8affee978b55cdb6e3bce1081032666fd226db1b5178521681aedbb1139202a4010ff6602ca71f057a17baf133ced83491431bd6a127cd717db69f41

  • SSDEEP

    1536:mnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxb:mGs8cd8eXlYairZYqMddH13b

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      bbabd4ebfd6c8f5f61a32fbd69096592a74d8599583007748a2ffe9604c94832N

    • Size

      96KB

    • MD5

      baef7c20c5e18a5657edb38c27e150d0

    • SHA1

      7128a13c102608f7521d8749eb55f39190c87262

    • SHA256

      bbabd4ebfd6c8f5f61a32fbd69096592a74d8599583007748a2ffe9604c94832

    • SHA512

      62680aaf8affee978b55cdb6e3bce1081032666fd226db1b5178521681aedbb1139202a4010ff6602ca71f057a17baf133ced83491431bd6a127cd717db69f41

    • SSDEEP

      1536:mnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxb:mGs8cd8eXlYairZYqMddH13b

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks