General

  • Target

    922b27fa2d195c9dfd1cc74db822718f0666eb062819a55761549f12ca49330b

  • Size

    84KB

  • Sample

    240523-aryn7seh36

  • MD5

    61521499ecba2607936d37e76f9292a7

  • SHA1

    554a1c49e58b6b670c3e723a7c91e76fa9d29b76

  • SHA256

    922b27fa2d195c9dfd1cc74db822718f0666eb062819a55761549f12ca49330b

  • SHA512

    fa049dd8c2afc4401a93348fc599cd76aa049d11f1cbc4eddf0c4c3b666338bac14b52e57968c55b6e01049fdaba585ad142110a0671b852abff99899ec807bd

  • SSDEEP

    1536:Pd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:ndseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      922b27fa2d195c9dfd1cc74db822718f0666eb062819a55761549f12ca49330b

    • Size

      84KB

    • MD5

      61521499ecba2607936d37e76f9292a7

    • SHA1

      554a1c49e58b6b670c3e723a7c91e76fa9d29b76

    • SHA256

      922b27fa2d195c9dfd1cc74db822718f0666eb062819a55761549f12ca49330b

    • SHA512

      fa049dd8c2afc4401a93348fc599cd76aa049d11f1cbc4eddf0c4c3b666338bac14b52e57968c55b6e01049fdaba585ad142110a0671b852abff99899ec807bd

    • SSDEEP

      1536:Pd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:ndseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks