General

  • Target

    e13dd48aafb3a93ce59d0947a7e62c9b50c68abe500e54bc4a56c8b595d67787

  • Size

    88KB

  • Sample

    240530-eqpgcsea2x

  • MD5

    37819cbdcd4262853dd67db9211e605f

  • SHA1

    94e2797ddc43704c9b666020786b29e96f4eed69

  • SHA256

    e13dd48aafb3a93ce59d0947a7e62c9b50c68abe500e54bc4a56c8b595d67787

  • SHA512

    9c7ce92910a6baa9cfab90dc64f716041f30c70a696ce134a7855eb2e3b64db349e36e761f423540625cb762908aee62be8ca0c35678d2fa92f19e26c70b1123

  • SSDEEP

    1536:Id9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:4dseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      e13dd48aafb3a93ce59d0947a7e62c9b50c68abe500e54bc4a56c8b595d67787

    • Size

      88KB

    • MD5

      37819cbdcd4262853dd67db9211e605f

    • SHA1

      94e2797ddc43704c9b666020786b29e96f4eed69

    • SHA256

      e13dd48aafb3a93ce59d0947a7e62c9b50c68abe500e54bc4a56c8b595d67787

    • SHA512

      9c7ce92910a6baa9cfab90dc64f716041f30c70a696ce134a7855eb2e3b64db349e36e761f423540625cb762908aee62be8ca0c35678d2fa92f19e26c70b1123

    • SSDEEP

      1536:Id9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:4dseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks