General

  • Target

    b926ffef81b990a31b74b6d0a9756e9316b6749dd8ac77dd7921d471c2e351a6

  • Size

    68KB

  • Sample

    240523-cr6e6aac6w

  • MD5

    e5e5158940f5b08bd1560810f2d9b872

  • SHA1

    f3419c747fb6d9a5da0cc98bc99ed292affb2998

  • SHA256

    b926ffef81b990a31b74b6d0a9756e9316b6749dd8ac77dd7921d471c2e351a6

  • SHA512

    16616c2553bd8db6c3e7cd621caa4f791402d75b6309b58e312024a717c4295a99e4a8f330b0293ee4fa3445700c6a382e399f00bbc7a2b78f4c335cc96e731d

  • SSDEEP

    1536:dd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:VdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      b926ffef81b990a31b74b6d0a9756e9316b6749dd8ac77dd7921d471c2e351a6

    • Size

      68KB

    • MD5

      e5e5158940f5b08bd1560810f2d9b872

    • SHA1

      f3419c747fb6d9a5da0cc98bc99ed292affb2998

    • SHA256

      b926ffef81b990a31b74b6d0a9756e9316b6749dd8ac77dd7921d471c2e351a6

    • SHA512

      16616c2553bd8db6c3e7cd621caa4f791402d75b6309b58e312024a717c4295a99e4a8f330b0293ee4fa3445700c6a382e399f00bbc7a2b78f4c335cc96e731d

    • SSDEEP

      1536:dd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:VdseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks