General

  • Target

    4fb4ecdffe56a2a5f67e05ff50df0bf6cd4461fd8744a9ed1af8cc9114588029

  • Size

    96KB

  • Sample

    250203-2zwy5awnhy

  • MD5

    73d2a65a8acc5264513bc55c9c7a2c8d

  • SHA1

    99dd66e3c2d10fd90729245d0e95040933b5176f

  • SHA256

    4fb4ecdffe56a2a5f67e05ff50df0bf6cd4461fd8744a9ed1af8cc9114588029

  • SHA512

    f4a9a1ed372c06829cc00aab496aecc47ef7cfdc2ee742276c9ea12b63dcae731983ac1a1cc14e54bafbd81e33f0a680fd9a0730ca4dcc4aafa8bd1c22eda3ae

  • SSDEEP

    1536:RnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxr:RGs8cd8eXlYairZYqMddH13r

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      4fb4ecdffe56a2a5f67e05ff50df0bf6cd4461fd8744a9ed1af8cc9114588029

    • Size

      96KB

    • MD5

      73d2a65a8acc5264513bc55c9c7a2c8d

    • SHA1

      99dd66e3c2d10fd90729245d0e95040933b5176f

    • SHA256

      4fb4ecdffe56a2a5f67e05ff50df0bf6cd4461fd8744a9ed1af8cc9114588029

    • SHA512

      f4a9a1ed372c06829cc00aab496aecc47ef7cfdc2ee742276c9ea12b63dcae731983ac1a1cc14e54bafbd81e33f0a680fd9a0730ca4dcc4aafa8bd1c22eda3ae

    • SSDEEP

      1536:RnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxr:RGs8cd8eXlYairZYqMddH13r

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks