General

  • Target

    49ba96231a1c91b1b80260fd8ee1df074d97326b71c11f838ca3f33560ed9bff

  • Size

    65KB

  • Sample

    240603-zyb68ahc3t

  • MD5

    1c6223fa00968923b43aad6a0b8433e1

  • SHA1

    5e234c3e97047c820c5573cc66cecbf24cbd7bc8

  • SHA256

    49ba96231a1c91b1b80260fd8ee1df074d97326b71c11f838ca3f33560ed9bff

  • SHA512

    9e7b6bc2b2832d58bf0a2a6b4b0b6052b68e23c2ab43a8196cbfba86c183035f6cc1ae24cac127d8829592a5844518d35396001a52e2304ffb720c81e51b8560

  • SSDEEP

    1536:ed9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZcl/5:GdseIO+EZEyFjEOFqTiQmOl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      49ba96231a1c91b1b80260fd8ee1df074d97326b71c11f838ca3f33560ed9bff

    • Size

      65KB

    • MD5

      1c6223fa00968923b43aad6a0b8433e1

    • SHA1

      5e234c3e97047c820c5573cc66cecbf24cbd7bc8

    • SHA256

      49ba96231a1c91b1b80260fd8ee1df074d97326b71c11f838ca3f33560ed9bff

    • SHA512

      9e7b6bc2b2832d58bf0a2a6b4b0b6052b68e23c2ab43a8196cbfba86c183035f6cc1ae24cac127d8829592a5844518d35396001a52e2304ffb720c81e51b8560

    • SSDEEP

      1536:ed9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZcl/5:GdseIO+EZEyFjEOFqTiQmOl/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks