General

  • Target

    e5e5e6167962458c35f2a3a1b35a9b12ab285143b5761930a458ea06d96fc6d8

  • Size

    88KB

  • Sample

    240605-fdravsfd87

  • MD5

    407217d4f6cbdf4ac2db283ba2300a31

  • SHA1

    75ac604bdd3a9bd2aa859f97936b8e4355e7589f

  • SHA256

    e5e5e6167962458c35f2a3a1b35a9b12ab285143b5761930a458ea06d96fc6d8

  • SHA512

    ee19b8fa70dadfa922100d820869aed7f01f393739f7cd688d12ac65590d6494cf64b7c125798862ba8f694e9ad73f912eb4771153138b2e67ece5df647c1996

  • SSDEEP

    1536:1d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:9dseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      e5e5e6167962458c35f2a3a1b35a9b12ab285143b5761930a458ea06d96fc6d8

    • Size

      88KB

    • MD5

      407217d4f6cbdf4ac2db283ba2300a31

    • SHA1

      75ac604bdd3a9bd2aa859f97936b8e4355e7589f

    • SHA256

      e5e5e6167962458c35f2a3a1b35a9b12ab285143b5761930a458ea06d96fc6d8

    • SHA512

      ee19b8fa70dadfa922100d820869aed7f01f393739f7cd688d12ac65590d6494cf64b7c125798862ba8f694e9ad73f912eb4771153138b2e67ece5df647c1996

    • SSDEEP

      1536:1d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:9dseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks