General

  • Target

    b06dba33e70303625df9db84cc395610be0a0ab5651e3a66cd413a3add1745ba

  • Size

    88KB

  • Sample

    240422-cdzqfsea97

  • MD5

    7846049cbabe03519393d78b2624526c

  • SHA1

    838a95b9f5c11adf58383c8cb55087eec1feb423

  • SHA256

    b06dba33e70303625df9db84cc395610be0a0ab5651e3a66cd413a3add1745ba

  • SHA512

    927eeb220b8c622d1e297100a218ec8ec8d3f66df537e87ae0f0a82b4dd52eeb09434297069a9caa35e1c541467222a5064815be5b2c3e6221ecbd644b86c112

  • SSDEEP

    1536:bd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:rdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      b06dba33e70303625df9db84cc395610be0a0ab5651e3a66cd413a3add1745ba

    • Size

      88KB

    • MD5

      7846049cbabe03519393d78b2624526c

    • SHA1

      838a95b9f5c11adf58383c8cb55087eec1feb423

    • SHA256

      b06dba33e70303625df9db84cc395610be0a0ab5651e3a66cd413a3add1745ba

    • SHA512

      927eeb220b8c622d1e297100a218ec8ec8d3f66df537e87ae0f0a82b4dd52eeb09434297069a9caa35e1c541467222a5064815be5b2c3e6221ecbd644b86c112

    • SSDEEP

      1536:bd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:rdseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks