General

  • Target

    d6caa8df97406bcf24055c2b8de28cd651bc6aa9740abb1a2b0c16a654104e34N.exe

  • Size

    96KB

  • Sample

    250127-vb3y7sxrcs

  • MD5

    bd7713ed8422c64dff66486d55ce4a50

  • SHA1

    5d94eb3814fcc4b464f025075ccf78aa7789b71f

  • SHA256

    d6caa8df97406bcf24055c2b8de28cd651bc6aa9740abb1a2b0c16a654104e34

  • SHA512

    c4482819a5463759c1a79c14147472ce1542eb175d788d394358ea3ee70909dde733f2b0523e240abda86ea339479081d0f4d75eef74a75a89e06876573c9ac5

  • SSDEEP

    1536:4nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxJ:4Gs8cd8eXlYairZYqMddH13J

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      d6caa8df97406bcf24055c2b8de28cd651bc6aa9740abb1a2b0c16a654104e34N.exe

    • Size

      96KB

    • MD5

      bd7713ed8422c64dff66486d55ce4a50

    • SHA1

      5d94eb3814fcc4b464f025075ccf78aa7789b71f

    • SHA256

      d6caa8df97406bcf24055c2b8de28cd651bc6aa9740abb1a2b0c16a654104e34

    • SHA512

      c4482819a5463759c1a79c14147472ce1542eb175d788d394358ea3ee70909dde733f2b0523e240abda86ea339479081d0f4d75eef74a75a89e06876573c9ac5

    • SSDEEP

      1536:4nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxJ:4Gs8cd8eXlYairZYqMddH13J

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks