General

  • Target

    c4daa36733b2be3d5cb89ab16807fd5e790bec05ee849df1db7723f316586426N.exe

  • Size

    96KB

  • Sample

    250205-hg11ksvkdv

  • MD5

    2acb002195d7adb3c6eace37311cb4c0

  • SHA1

    685bf6ed8201ad3465d414987f997b6712434536

  • SHA256

    c4daa36733b2be3d5cb89ab16807fd5e790bec05ee849df1db7723f316586426

  • SHA512

    4f1fcff94d824216d41be3aaf4723912e013b01c0830c298d778c30b1fc501346bbe0751e647542b42f4ebe19061927d835863a568cf35577318312c51ad1129

  • SSDEEP

    1536:AnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxz:AGs8cd8eXlYairZYqMddH13z

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      c4daa36733b2be3d5cb89ab16807fd5e790bec05ee849df1db7723f316586426N.exe

    • Size

      96KB

    • MD5

      2acb002195d7adb3c6eace37311cb4c0

    • SHA1

      685bf6ed8201ad3465d414987f997b6712434536

    • SHA256

      c4daa36733b2be3d5cb89ab16807fd5e790bec05ee849df1db7723f316586426

    • SHA512

      4f1fcff94d824216d41be3aaf4723912e013b01c0830c298d778c30b1fc501346bbe0751e647542b42f4ebe19061927d835863a568cf35577318312c51ad1129

    • SSDEEP

      1536:AnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxz:AGs8cd8eXlYairZYqMddH13z

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks