General

  • Target

    267d4212e0b24660bb1c7ac2c79851b9dac156bac9741b565e386850abe184a6

  • Size

    35KB

  • Sample

    240509-yhxybaee28

  • MD5

    939735335994c5459eb6364d60750cc0

  • SHA1

    d2a7dc1c210372c684a9c3fe5ad834fa749cb584

  • SHA256

    267d4212e0b24660bb1c7ac2c79851b9dac156bac9741b565e386850abe184a6

  • SHA512

    2a49ed0766a3035c923596afcb50bae2d3b8ca30f9d643fb0454bf990d949df795ec9f29163c8ac40f3dcb906f11b46b5e1a1000eac3dd80294cae5fd690bdae

  • SSDEEP

    768:X6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:q8Z0kA7FHlO2OwOTUtKjpB

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      267d4212e0b24660bb1c7ac2c79851b9dac156bac9741b565e386850abe184a6

    • Size

      35KB

    • MD5

      939735335994c5459eb6364d60750cc0

    • SHA1

      d2a7dc1c210372c684a9c3fe5ad834fa749cb584

    • SHA256

      267d4212e0b24660bb1c7ac2c79851b9dac156bac9741b565e386850abe184a6

    • SHA512

      2a49ed0766a3035c923596afcb50bae2d3b8ca30f9d643fb0454bf990d949df795ec9f29163c8ac40f3dcb906f11b46b5e1a1000eac3dd80294cae5fd690bdae

    • SSDEEP

      768:X6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:q8Z0kA7FHlO2OwOTUtKjpB

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks