General

  • Target

    cc5b4d954e2a9c74cdc31a11f4322b8f0e1ac300f15a8ec2fad16d17aeca25ddN.exe

  • Size

    96KB

  • Sample

    250224-r3wsesxqx7

  • MD5

    dc13ac1eb0bcdc4664e868bfa5286890

  • SHA1

    bde56c417416dbb298ec42e03f71cad3dff0fec0

  • SHA256

    cc5b4d954e2a9c74cdc31a11f4322b8f0e1ac300f15a8ec2fad16d17aeca25dd

  • SHA512

    b6557b334c9186aef75b091ef313eac20da106adf74fa67e66f6a35e84d74cfc40e42aefb0f284590da012e72be6847d8d4fcc6944c740e0f9205468180b6248

  • SSDEEP

    1536:InAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:IGs8cd8eXlYairZYqMddH13L

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      cc5b4d954e2a9c74cdc31a11f4322b8f0e1ac300f15a8ec2fad16d17aeca25ddN.exe

    • Size

      96KB

    • MD5

      dc13ac1eb0bcdc4664e868bfa5286890

    • SHA1

      bde56c417416dbb298ec42e03f71cad3dff0fec0

    • SHA256

      cc5b4d954e2a9c74cdc31a11f4322b8f0e1ac300f15a8ec2fad16d17aeca25dd

    • SHA512

      b6557b334c9186aef75b091ef313eac20da106adf74fa67e66f6a35e84d74cfc40e42aefb0f284590da012e72be6847d8d4fcc6944c740e0f9205468180b6248

    • SSDEEP

      1536:InAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:IGs8cd8eXlYairZYqMddH13L

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks