General

  • Target

    0712dc18be5941863fe5ca13d5e75c0265ed690eb33d3171cc999201fc5cbf34N.exe

  • Size

    96KB

  • Sample

    250120-tkz38sxpal

  • MD5

    9da845581bd68245737dedb0d1a076b0

  • SHA1

    d1d9565288a7b77490fbaf25ef791d1b0d3ddedc

  • SHA256

    0712dc18be5941863fe5ca13d5e75c0265ed690eb33d3171cc999201fc5cbf34

  • SHA512

    ea60d528113adef17a43affc1d564bf0da2c4962d1b08ea8a98a40d6907fee221a52bec3058211717cdd2db50cd688aaf467dcd99586ef4a32d74f1396ca801e

  • SSDEEP

    1536:NnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxb:NGs8cd8eXlYairZYqMddH13b

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      0712dc18be5941863fe5ca13d5e75c0265ed690eb33d3171cc999201fc5cbf34N.exe

    • Size

      96KB

    • MD5

      9da845581bd68245737dedb0d1a076b0

    • SHA1

      d1d9565288a7b77490fbaf25ef791d1b0d3ddedc

    • SHA256

      0712dc18be5941863fe5ca13d5e75c0265ed690eb33d3171cc999201fc5cbf34

    • SHA512

      ea60d528113adef17a43affc1d564bf0da2c4962d1b08ea8a98a40d6907fee221a52bec3058211717cdd2db50cd688aaf467dcd99586ef4a32d74f1396ca801e

    • SSDEEP

      1536:NnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxb:NGs8cd8eXlYairZYqMddH13b

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks