General

  • Target

    d726a02838b1ea97c309055f6c8e6cf51cbcc3dee07f53646682e5eb52bf8f17

  • Size

    76KB

  • Sample

    240522-j29znahb58

  • MD5

    9bf9991c94bf9af2935e453bc8885ca7

  • SHA1

    ba2d8ae3c8810009f6fee4c2d44fb3a973d07d6b

  • SHA256

    d726a02838b1ea97c309055f6c8e6cf51cbcc3dee07f53646682e5eb52bf8f17

  • SHA512

    f7db2057c5d6594d58676e75cc99ab9babe30c6096f85b73890256cdb7a9b0955fff4478e39719db957c740c1e87811d45fadbd24735086494bfa176eb3965be

  • SSDEEP

    768:zMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAW:zbIvYvZEyFKF6N4yS+AQmZTl/5O

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      d726a02838b1ea97c309055f6c8e6cf51cbcc3dee07f53646682e5eb52bf8f17

    • Size

      76KB

    • MD5

      9bf9991c94bf9af2935e453bc8885ca7

    • SHA1

      ba2d8ae3c8810009f6fee4c2d44fb3a973d07d6b

    • SHA256

      d726a02838b1ea97c309055f6c8e6cf51cbcc3dee07f53646682e5eb52bf8f17

    • SHA512

      f7db2057c5d6594d58676e75cc99ab9babe30c6096f85b73890256cdb7a9b0955fff4478e39719db957c740c1e87811d45fadbd24735086494bfa176eb3965be

    • SSDEEP

      768:zMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAW:zbIvYvZEyFKF6N4yS+AQmZTl/5O

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks