General

  • Target

    a351c06234e5017015edf3d4161101283856631150650e148ef085bb6d7829f0

  • Size

    65KB

  • Sample

    240521-ckfwxsef69

  • MD5

    6e014ab63f40bff991f332e8719cdab9

  • SHA1

    16c7f73263e614cc66a9386bf5917cbd3d562193

  • SHA256

    a351c06234e5017015edf3d4161101283856631150650e148ef085bb6d7829f0

  • SHA512

    76442cbfeb9f90a4bfbc44e107e88030a2850d201e8f737531aad48e375eb7b80368dd20393ed21ce606ab00d35a237ba881a8eac09123f92baa993fb794e943

  • SSDEEP

    1536:4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZcl/5:IdseIO+EZEyFjEOFqTiQmOl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      a351c06234e5017015edf3d4161101283856631150650e148ef085bb6d7829f0

    • Size

      65KB

    • MD5

      6e014ab63f40bff991f332e8719cdab9

    • SHA1

      16c7f73263e614cc66a9386bf5917cbd3d562193

    • SHA256

      a351c06234e5017015edf3d4161101283856631150650e148ef085bb6d7829f0

    • SHA512

      76442cbfeb9f90a4bfbc44e107e88030a2850d201e8f737531aad48e375eb7b80368dd20393ed21ce606ab00d35a237ba881a8eac09123f92baa993fb794e943

    • SSDEEP

      1536:4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZcl/5:IdseIO+EZEyFjEOFqTiQmOl/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks