General

  • Target

    14921464e306818bf8f00c15755d11d7ffdfe0fac41d2171acf05cd96fcc8776.exe

  • Size

    84KB

  • Sample

    240522-cyntpahd96

  • MD5

    0789034351c8c03365bcdb1425bcb720

  • SHA1

    105cd5e2e0aa963a9fb040fb00a2221e7a96d5b7

  • SHA256

    14921464e306818bf8f00c15755d11d7ffdfe0fac41d2171acf05cd96fcc8776

  • SHA512

    b6933c88f395728f22d7d0941520b65c90a332d2e61340d6275b0bd02cd8e7b619e23f321e1e3f75123c1fb2c904bd81f526697e6a6a6cc0d66a9ba6b4d49fc5

  • SSDEEP

    1536:Td9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:TdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      14921464e306818bf8f00c15755d11d7ffdfe0fac41d2171acf05cd96fcc8776.exe

    • Size

      84KB

    • MD5

      0789034351c8c03365bcdb1425bcb720

    • SHA1

      105cd5e2e0aa963a9fb040fb00a2221e7a96d5b7

    • SHA256

      14921464e306818bf8f00c15755d11d7ffdfe0fac41d2171acf05cd96fcc8776

    • SHA512

      b6933c88f395728f22d7d0941520b65c90a332d2e61340d6275b0bd02cd8e7b619e23f321e1e3f75123c1fb2c904bd81f526697e6a6a6cc0d66a9ba6b4d49fc5

    • SSDEEP

      1536:Td9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:TdseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks