General

  • Target

    2025-04-06_07110c5f5539229244022b8504647cae_amadey_rhadamanthys_smoke-loader

  • Size

    134KB

  • Sample

    250406-zc965axzht

  • MD5

    07110c5f5539229244022b8504647cae

  • SHA1

    7b4672e82ed80f3baa45347e97e8cec0c09d81ef

  • SHA256

    42d498e51e689744b4a116ca8c1ef64abf9dbc8a03dab9e2f6451a0cdf927d1d

  • SHA512

    8d11e6151194ed88f17befd24f266a243ad3391b75d491125a93fa674b0f9ad6abf3e53f094cfa200d3ff2c8c54b277df23ab8c9855a0026222ade3a05525391

  • SSDEEP

    1536:rDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCia:niRTeH0iqAW6J6f1tqF6dngNmaZCia

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      2025-04-06_07110c5f5539229244022b8504647cae_amadey_rhadamanthys_smoke-loader

    • Size

      134KB

    • MD5

      07110c5f5539229244022b8504647cae

    • SHA1

      7b4672e82ed80f3baa45347e97e8cec0c09d81ef

    • SHA256

      42d498e51e689744b4a116ca8c1ef64abf9dbc8a03dab9e2f6451a0cdf927d1d

    • SHA512

      8d11e6151194ed88f17befd24f266a243ad3391b75d491125a93fa674b0f9ad6abf3e53f094cfa200d3ff2c8c54b277df23ab8c9855a0026222ade3a05525391

    • SSDEEP

      1536:rDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCia:niRTeH0iqAW6J6f1tqF6dngNmaZCia

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.