General

  • Target

    1afd01860aa4a3311cb9e33f8847d275d4f71866f9766c328c2fc10466e55d98.exe

  • Size

    96KB

  • Sample

    250202-ap12jsxjcw

  • MD5

    06f9986e4fd70ec310d913a22795d5c4

  • SHA1

    c0e06f7d1584e7f67647830aabf325511ec17e14

  • SHA256

    1afd01860aa4a3311cb9e33f8847d275d4f71866f9766c328c2fc10466e55d98

  • SHA512

    26d793ae3715a2c9efac88fe48238213a2b42ebbf72e5422504318e8a5379b52f6d4467ef113a83ac8f5e341443303c3d6776842cf8c55efd770ecd96368913a

  • SSDEEP

    1536:TnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxj:TGs8cd8eXlYairZYqMddH13j

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      1afd01860aa4a3311cb9e33f8847d275d4f71866f9766c328c2fc10466e55d98.exe

    • Size

      96KB

    • MD5

      06f9986e4fd70ec310d913a22795d5c4

    • SHA1

      c0e06f7d1584e7f67647830aabf325511ec17e14

    • SHA256

      1afd01860aa4a3311cb9e33f8847d275d4f71866f9766c328c2fc10466e55d98

    • SHA512

      26d793ae3715a2c9efac88fe48238213a2b42ebbf72e5422504318e8a5379b52f6d4467ef113a83ac8f5e341443303c3d6776842cf8c55efd770ecd96368913a

    • SSDEEP

      1536:TnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxj:TGs8cd8eXlYairZYqMddH13j

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks