General

  • Target

    fa631e3a01c206a795aca1e4c24690b86560364546ce52405416436017ad746d

  • Size

    96KB

  • Sample

    250207-hzf35atjdy

  • MD5

    aa88acfb7a9968aa6855bdcd044b8bad

  • SHA1

    95d1dfdade216b01efe0cfd38445619180da0a82

  • SHA256

    fa631e3a01c206a795aca1e4c24690b86560364546ce52405416436017ad746d

  • SHA512

    6220d7d5c6cbd78c114e542e1374d69017ea35535056aef2a7e1fff42cff430ce269a0f3c94ae1fc96d1f34776181e835b86fac543f8db58efa5b14161550891

  • SSDEEP

    1536:knAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxb:kGs8cd8eXlYairZYqMddH13b

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      fa631e3a01c206a795aca1e4c24690b86560364546ce52405416436017ad746d

    • Size

      96KB

    • MD5

      aa88acfb7a9968aa6855bdcd044b8bad

    • SHA1

      95d1dfdade216b01efe0cfd38445619180da0a82

    • SHA256

      fa631e3a01c206a795aca1e4c24690b86560364546ce52405416436017ad746d

    • SHA512

      6220d7d5c6cbd78c114e542e1374d69017ea35535056aef2a7e1fff42cff430ce269a0f3c94ae1fc96d1f34776181e835b86fac543f8db58efa5b14161550891

    • SSDEEP

      1536:knAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxb:kGs8cd8eXlYairZYqMddH13b

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks