General

  • Target

    5f023ef87897ed5247a0b04a60fb11bf947d61b6a47dd8f5ebea93ef95112182

  • Size

    80KB

  • Sample

    240521-3n972sdh6y

  • MD5

    448a0003171b766520b14466ec51c4a0

  • SHA1

    004433859bcdd8bcb4d7d88e5eb4169f6b6eed7c

  • SHA256

    5f023ef87897ed5247a0b04a60fb11bf947d61b6a47dd8f5ebea93ef95112182

  • SHA512

    224e1dfb9ce8add8ed92f15cc8d69977680bf88d4ff54bdf77cf2817e640e19fe34d8ad5e56ae98fba684f55d1df6182073166cb68e916bf6175c2c9e70c972c

  • SSDEEP

    768:pfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:pfbIvYvZEyFKF6N4yS+AQmZTl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      5f023ef87897ed5247a0b04a60fb11bf947d61b6a47dd8f5ebea93ef95112182

    • Size

      80KB

    • MD5

      448a0003171b766520b14466ec51c4a0

    • SHA1

      004433859bcdd8bcb4d7d88e5eb4169f6b6eed7c

    • SHA256

      5f023ef87897ed5247a0b04a60fb11bf947d61b6a47dd8f5ebea93ef95112182

    • SHA512

      224e1dfb9ce8add8ed92f15cc8d69977680bf88d4ff54bdf77cf2817e640e19fe34d8ad5e56ae98fba684f55d1df6182073166cb68e916bf6175c2c9e70c972c

    • SSDEEP

      768:pfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:pfbIvYvZEyFKF6N4yS+AQmZTl/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks