General

  • Target

    d38337c22ba50c9f064ccb348439a030b78ea3348691d47db33e74f4338e04b8

  • Size

    88KB

  • Sample

    240523-d17j9acd84

  • MD5

    adcc5dc5ae7e2541d20601420fad5e27

  • SHA1

    09685bdc2b8959b5a81c12bfe550197dcf7e7984

  • SHA256

    d38337c22ba50c9f064ccb348439a030b78ea3348691d47db33e74f4338e04b8

  • SHA512

    d1299b5f9b134382e056f8c56f6c4739114c17cd80680265c9f2c852e633b530ced44d7ca2c9604ce25bdbd0ee6cef79cc3f1b6fc72d71b7a0f4466e9b23f63c

  • SSDEEP

    1536:ad9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:6dseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      d38337c22ba50c9f064ccb348439a030b78ea3348691d47db33e74f4338e04b8

    • Size

      88KB

    • MD5

      adcc5dc5ae7e2541d20601420fad5e27

    • SHA1

      09685bdc2b8959b5a81c12bfe550197dcf7e7984

    • SHA256

      d38337c22ba50c9f064ccb348439a030b78ea3348691d47db33e74f4338e04b8

    • SHA512

      d1299b5f9b134382e056f8c56f6c4739114c17cd80680265c9f2c852e633b530ced44d7ca2c9604ce25bdbd0ee6cef79cc3f1b6fc72d71b7a0f4466e9b23f63c

    • SSDEEP

      1536:ad9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:6dseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks