General

  • Target

    e010c64f86e2fd49b218fc5895388fdf9d351e04fdcc7a83db122caf7e853691

  • Size

    88KB

  • Sample

    240314-admpsadd91

  • MD5

    1b1c6b1c26e0706c241a51697a19afd4

  • SHA1

    4b25c67b5e4cb5101f9ae8a8d258883d935e91fc

  • SHA256

    e010c64f86e2fd49b218fc5895388fdf9d351e04fdcc7a83db122caf7e853691

  • SHA512

    e12ca93ab1f2ff4ce6305efd5d993409a0aa502e2f50496010fab111366929955bd028c58ddbd18680e73ad68d1097bf21d7ded26a6554ec1b5fea88b6ba440a

  • SSDEEP

    1536:jd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:DdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      e010c64f86e2fd49b218fc5895388fdf9d351e04fdcc7a83db122caf7e853691

    • Size

      88KB

    • MD5

      1b1c6b1c26e0706c241a51697a19afd4

    • SHA1

      4b25c67b5e4cb5101f9ae8a8d258883d935e91fc

    • SHA256

      e010c64f86e2fd49b218fc5895388fdf9d351e04fdcc7a83db122caf7e853691

    • SHA512

      e12ca93ab1f2ff4ce6305efd5d993409a0aa502e2f50496010fab111366929955bd028c58ddbd18680e73ad68d1097bf21d7ded26a6554ec1b5fea88b6ba440a

    • SSDEEP

      1536:jd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:DdseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks