General

  • Target

    c2bb4cd1253f1c220eddd298ddf39c376c6902401643b0f42eb09b5432fc134f.exe

  • Size

    96KB

  • Sample

    250119-y2cfqavkcr

  • MD5

    31259142051fb5b341551ad51cae55c9

  • SHA1

    d04b24a96b510995a7d7f6f665bf9eef5a480829

  • SHA256

    c2bb4cd1253f1c220eddd298ddf39c376c6902401643b0f42eb09b5432fc134f

  • SHA512

    1ebfccf6797b9520bc07b30ea35935cd33770559cd9c9d78da6081988c002fad1e7587f45192f9a6853b9447a0b2e674a33f8ad1f411400efc820ff3415ccfbe

  • SSDEEP

    1536:BnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxB:BGs8cd8eXlYairZYqMddH13B

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      c2bb4cd1253f1c220eddd298ddf39c376c6902401643b0f42eb09b5432fc134f.exe

    • Size

      96KB

    • MD5

      31259142051fb5b341551ad51cae55c9

    • SHA1

      d04b24a96b510995a7d7f6f665bf9eef5a480829

    • SHA256

      c2bb4cd1253f1c220eddd298ddf39c376c6902401643b0f42eb09b5432fc134f

    • SHA512

      1ebfccf6797b9520bc07b30ea35935cd33770559cd9c9d78da6081988c002fad1e7587f45192f9a6853b9447a0b2e674a33f8ad1f411400efc820ff3415ccfbe

    • SSDEEP

      1536:BnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxB:BGs8cd8eXlYairZYqMddH13B

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks