General

  • Target

    fbed82a4fea09b2eab3bf28e53ae1e425cb5256b943af573534c01414a599c0d

  • Size

    96KB

  • Sample

    250124-nhd54axlgp

  • MD5

    62e4558b0fdffc45964bb16a5a23a5ee

  • SHA1

    fb067f4423b7c85df8565b27ff015fa5f8e35b23

  • SHA256

    fbed82a4fea09b2eab3bf28e53ae1e425cb5256b943af573534c01414a599c0d

  • SHA512

    7ccecace029db244772aa3637b9b6bb283ddaacbdde08cbc6e95290fdd790a2cd0be97b37ae7478a4b1dd443365ef87b561fa369e5b5a562b33506509417ede9

  • SSDEEP

    1536:4nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:4Gs8cd8eXlYairZYqMddH13L

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      fbed82a4fea09b2eab3bf28e53ae1e425cb5256b943af573534c01414a599c0d

    • Size

      96KB

    • MD5

      62e4558b0fdffc45964bb16a5a23a5ee

    • SHA1

      fb067f4423b7c85df8565b27ff015fa5f8e35b23

    • SHA256

      fbed82a4fea09b2eab3bf28e53ae1e425cb5256b943af573534c01414a599c0d

    • SHA512

      7ccecace029db244772aa3637b9b6bb283ddaacbdde08cbc6e95290fdd790a2cd0be97b37ae7478a4b1dd443365ef87b561fa369e5b5a562b33506509417ede9

    • SSDEEP

      1536:4nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:4Gs8cd8eXlYairZYqMddH13L

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks