General

  • Target

    86e798dffc69b395c3252b485ffbdb1ca77749bc1c02e2ae2c2f40c7192c8b7a.exe

  • Size

    96KB

  • Sample

    250123-e5yzcatmcm

  • MD5

    07fbed2884abf65aa0130d7b72c8650c

  • SHA1

    66c0e7809a326272f8a5ff74bbe37a9538d1730f

  • SHA256

    86e798dffc69b395c3252b485ffbdb1ca77749bc1c02e2ae2c2f40c7192c8b7a

  • SHA512

    7a4a2e6448756ff14d5643ae020635f2212975cf45c0ef593d97e271d98aa69eac3fde9680caff2ac271346fc13e395af8bd178a5a1e9bf2fcb42b84b889e13a

  • SSDEEP

    1536:BnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxD:BGs8cd8eXlYairZYqMddH13D

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      86e798dffc69b395c3252b485ffbdb1ca77749bc1c02e2ae2c2f40c7192c8b7a.exe

    • Size

      96KB

    • MD5

      07fbed2884abf65aa0130d7b72c8650c

    • SHA1

      66c0e7809a326272f8a5ff74bbe37a9538d1730f

    • SHA256

      86e798dffc69b395c3252b485ffbdb1ca77749bc1c02e2ae2c2f40c7192c8b7a

    • SHA512

      7a4a2e6448756ff14d5643ae020635f2212975cf45c0ef593d97e271d98aa69eac3fde9680caff2ac271346fc13e395af8bd178a5a1e9bf2fcb42b84b889e13a

    • SSDEEP

      1536:BnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxD:BGs8cd8eXlYairZYqMddH13D

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks