General

  • Target

    b3b3bdaa466f6a514d068e0fc85ef3e1b69314744719dcd3aa6a8b8ed47e9197

  • Size

    92KB

  • Sample

    240522-gfa74aea3w

  • MD5

    44b96f9e583ef8dbb353a83277f2d0dd

  • SHA1

    078d2634cb2028f2217b47691b61cd04d31f006d

  • SHA256

    b3b3bdaa466f6a514d068e0fc85ef3e1b69314744719dcd3aa6a8b8ed47e9197

  • SHA512

    4093f9869601dbf7ec7c95db24d263d8f1f6d0439dfb2254891e284b49f8a2094a65457b7525b1d2be7a8a40a9a83585c78c23c664a0b95ad2e3fe896afbde93

  • SSDEEP

    768:DMEIvFGvZEr8LFK0ic4PN47eSdYAHwmZNp6JXXlaa5uA:DbIvYvZEyFKFPN4yS+AQmZol/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      b3b3bdaa466f6a514d068e0fc85ef3e1b69314744719dcd3aa6a8b8ed47e9197

    • Size

      92KB

    • MD5

      44b96f9e583ef8dbb353a83277f2d0dd

    • SHA1

      078d2634cb2028f2217b47691b61cd04d31f006d

    • SHA256

      b3b3bdaa466f6a514d068e0fc85ef3e1b69314744719dcd3aa6a8b8ed47e9197

    • SHA512

      4093f9869601dbf7ec7c95db24d263d8f1f6d0439dfb2254891e284b49f8a2094a65457b7525b1d2be7a8a40a9a83585c78c23c664a0b95ad2e3fe896afbde93

    • SSDEEP

      768:DMEIvFGvZEr8LFK0ic4PN47eSdYAHwmZNp6JXXlaa5uA:DbIvYvZEyFKFPN4yS+AQmZol/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks