General

  • Target

    9415570091aaa7a9ee86658f30875442af87c671c7fd75b565e2758870955f69N.exe

  • Size

    96KB

  • Sample

    250121-cs9tza1ndn

  • MD5

    8ceb10f03128c8cde176c11bb6428710

  • SHA1

    9c7b83021d362fd5ded21a64e17cdedfa8dff696

  • SHA256

    9415570091aaa7a9ee86658f30875442af87c671c7fd75b565e2758870955f69

  • SHA512

    cf0223b954c096322c410b51a670bce03f68634dc7dfd5be1eba05335e50e7499d66a60da08b0a4a06d58dcdf665f008b8639f2912f7ab9c5849d48a1e920bc7

  • SSDEEP

    1536:/nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:/Gs8cd8eXlYairZYqMddH13L

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      9415570091aaa7a9ee86658f30875442af87c671c7fd75b565e2758870955f69N.exe

    • Size

      96KB

    • MD5

      8ceb10f03128c8cde176c11bb6428710

    • SHA1

      9c7b83021d362fd5ded21a64e17cdedfa8dff696

    • SHA256

      9415570091aaa7a9ee86658f30875442af87c671c7fd75b565e2758870955f69

    • SHA512

      cf0223b954c096322c410b51a670bce03f68634dc7dfd5be1eba05335e50e7499d66a60da08b0a4a06d58dcdf665f008b8639f2912f7ab9c5849d48a1e920bc7

    • SSDEEP

      1536:/nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:/Gs8cd8eXlYairZYqMddH13L

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks