General

  • Target

    adc21cd6b86a38e3d9b1f123117ef22639641b375da55a99a1a6adacc786a968

  • Size

    96KB

  • Sample

    250118-jx9hbsylam

  • MD5

    e347ccf3742fa70307a7a15f108b0494

  • SHA1

    ca8b2f143293076f00a32caf1fa0694e3808c557

  • SHA256

    adc21cd6b86a38e3d9b1f123117ef22639641b375da55a99a1a6adacc786a968

  • SHA512

    cf4a22c0c945d6bc98df0f1b7e89fe8d307c365a8451d78e377bb6e1965c87004af5d491e6189701569ab3323ee5629fb2c50df105ecb4700d264dcd30179d3b

  • SSDEEP

    1536:LnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:LGs8cd8eXlYairZYqMddH13L

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      adc21cd6b86a38e3d9b1f123117ef22639641b375da55a99a1a6adacc786a968

    • Size

      96KB

    • MD5

      e347ccf3742fa70307a7a15f108b0494

    • SHA1

      ca8b2f143293076f00a32caf1fa0694e3808c557

    • SHA256

      adc21cd6b86a38e3d9b1f123117ef22639641b375da55a99a1a6adacc786a968

    • SHA512

      cf4a22c0c945d6bc98df0f1b7e89fe8d307c365a8451d78e377bb6e1965c87004af5d491e6189701569ab3323ee5629fb2c50df105ecb4700d264dcd30179d3b

    • SSDEEP

      1536:LnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:LGs8cd8eXlYairZYqMddH13L

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks