General

  • Target

    a28e45d2f3b5dce93807357500872dc7

  • Size

    88KB

  • Sample

    240409-ywwx6shb95

  • MD5

    a28e45d2f3b5dce93807357500872dc7

  • SHA1

    f7b6ee29e222149060c740e44a0350297e45a90b

  • SHA256

    d2a9c72911f26aabdc1dc53b964f310fea32b590f59dd7a7a9a196bdbc5033b5

  • SHA512

    39424671d4274c91281f2549ce63f727a21e6711c8e0f189f823165acad501636cfec7341aab5676349ce1ddb9fbb0ffd002834108fcbeabf9d4126b6eb23857

  • SSDEEP

    1536:xd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:BdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      a28e45d2f3b5dce93807357500872dc7

    • Size

      88KB

    • MD5

      a28e45d2f3b5dce93807357500872dc7

    • SHA1

      f7b6ee29e222149060c740e44a0350297e45a90b

    • SHA256

      d2a9c72911f26aabdc1dc53b964f310fea32b590f59dd7a7a9a196bdbc5033b5

    • SHA512

      39424671d4274c91281f2549ce63f727a21e6711c8e0f189f823165acad501636cfec7341aab5676349ce1ddb9fbb0ffd002834108fcbeabf9d4126b6eb23857

    • SSDEEP

      1536:xd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:BdseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks