General

  • Target

    6bdd8c2c1d71bcec5d1ca55d509e4658.exe

  • Size

    88KB

  • Sample

    240110-w245madhf5

  • MD5

    6bdd8c2c1d71bcec5d1ca55d509e4658

  • SHA1

    b9508c5f40e56cb01c643f5f1e85660f1aa0a307

  • SHA256

    64a2fbad84b43f68ec219595d3ca033952847a7172723e3e00c2635b259971a3

  • SHA512

    25fd905bc3c0cf897f6aff76dc659a53b786c7fd3c73e321fe8e3a2f3adaf6799a53e691a3f09e03e2841b3ba47e0d0f7c10800919bb0f46c0ddc9633494ef33

  • SSDEEP

    1536:Ad9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:gdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      6bdd8c2c1d71bcec5d1ca55d509e4658.exe

    • Size

      88KB

    • MD5

      6bdd8c2c1d71bcec5d1ca55d509e4658

    • SHA1

      b9508c5f40e56cb01c643f5f1e85660f1aa0a307

    • SHA256

      64a2fbad84b43f68ec219595d3ca033952847a7172723e3e00c2635b259971a3

    • SHA512

      25fd905bc3c0cf897f6aff76dc659a53b786c7fd3c73e321fe8e3a2f3adaf6799a53e691a3f09e03e2841b3ba47e0d0f7c10800919bb0f46c0ddc9633494ef33

    • SSDEEP

      1536:Ad9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:gdseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks