General

  • Target

    418da407d8be85a3aaca898735dacb052f309e13076bc52dcc6be2c17d31251b

  • Size

    92KB

  • Sample

    240525-zqxsysaf25

  • MD5

    5e5380433f16b8e9b89127ac05aa8aae

  • SHA1

    0e689e3af81c8fe9885727061537e95de9b07d89

  • SHA256

    418da407d8be85a3aaca898735dacb052f309e13076bc52dcc6be2c17d31251b

  • SHA512

    8465645e61737df0ad74f9d81612b3c3e22a634d5cd6d54a777c03cd13819d840c13b7defd9df94a47667b0a37bdd419c5e55ffddcf48285a7ff48e2d78173ae

  • SSDEEP

    768:mMEIYFGvoErlLFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:mbIYYvoE1FKF6N4yS+AQmZTl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      418da407d8be85a3aaca898735dacb052f309e13076bc52dcc6be2c17d31251b

    • Size

      92KB

    • MD5

      5e5380433f16b8e9b89127ac05aa8aae

    • SHA1

      0e689e3af81c8fe9885727061537e95de9b07d89

    • SHA256

      418da407d8be85a3aaca898735dacb052f309e13076bc52dcc6be2c17d31251b

    • SHA512

      8465645e61737df0ad74f9d81612b3c3e22a634d5cd6d54a777c03cd13819d840c13b7defd9df94a47667b0a37bdd419c5e55ffddcf48285a7ff48e2d78173ae

    • SSDEEP

      768:mMEIYFGvoErlLFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:mbIYYvoE1FKF6N4yS+AQmZTl/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks