General

  • Target

    ad8802801177bd9be07752b123f91723388ede203baca6f0dc749461202ff1c3N.exe

  • Size

    96KB

  • Sample

    250121-rckbpsxjds

  • MD5

    4fdc5b677988c7885e6b14e5a0c505c0

  • SHA1

    14880f4ab2c99d1ca349809190b4bc71b8cb94ea

  • SHA256

    ad8802801177bd9be07752b123f91723388ede203baca6f0dc749461202ff1c3

  • SHA512

    59831e9966e15e173a5b00c9fe8c03937c4a5d037a496cd99e4d92448d469c7375020eee5a7a542340d978d58087d389716de4ad5eb2a2056adae9bdb837971b

  • SSDEEP

    1536:LnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxO:LGs8cd8eXlYairZYqMddH13O

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      ad8802801177bd9be07752b123f91723388ede203baca6f0dc749461202ff1c3N.exe

    • Size

      96KB

    • MD5

      4fdc5b677988c7885e6b14e5a0c505c0

    • SHA1

      14880f4ab2c99d1ca349809190b4bc71b8cb94ea

    • SHA256

      ad8802801177bd9be07752b123f91723388ede203baca6f0dc749461202ff1c3

    • SHA512

      59831e9966e15e173a5b00c9fe8c03937c4a5d037a496cd99e4d92448d469c7375020eee5a7a542340d978d58087d389716de4ad5eb2a2056adae9bdb837971b

    • SSDEEP

      1536:LnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxO:LGs8cd8eXlYairZYqMddH13O

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks