General

  • Target

    27ae1e500004745b35b8164abe5fad810f82908ab5b44ba92ce0f7bfeaaaec75.exe

  • Size

    96KB

  • Sample

    250124-eqcskayncw

  • MD5

    1c75638f6c6c6644ba830fdbd06cbedc

  • SHA1

    2bd3ae1f289ec8aeb9591fbe4a6a9b2f0460899a

  • SHA256

    27ae1e500004745b35b8164abe5fad810f82908ab5b44ba92ce0f7bfeaaaec75

  • SHA512

    f978b7e39863cb51f3c4f53c0a5ad9089695fa8a6d59ccb3511a5c159f9f5e1eb4c4c950c7de797976f16da55a0f57ee3da278664c53fbb698bb151f63239267

  • SSDEEP

    1536:SnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxT:SGs8cd8eXlYairZYqMddH13T

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      27ae1e500004745b35b8164abe5fad810f82908ab5b44ba92ce0f7bfeaaaec75.exe

    • Size

      96KB

    • MD5

      1c75638f6c6c6644ba830fdbd06cbedc

    • SHA1

      2bd3ae1f289ec8aeb9591fbe4a6a9b2f0460899a

    • SHA256

      27ae1e500004745b35b8164abe5fad810f82908ab5b44ba92ce0f7bfeaaaec75

    • SHA512

      f978b7e39863cb51f3c4f53c0a5ad9089695fa8a6d59ccb3511a5c159f9f5e1eb4c4c950c7de797976f16da55a0f57ee3da278664c53fbb698bb151f63239267

    • SSDEEP

      1536:SnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxT:SGs8cd8eXlYairZYqMddH13T

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks