General

  • Target

    2d5687f20449b6fc1280a0a26059ccb70207ccf4307cf175b88d4de727e3b711

  • Size

    72KB

  • Sample

    240606-zhex6sbg6s

  • MD5

    8dd8738ee3bd1a49558cbfa559a6feaf

  • SHA1

    4ab9afc83ebb5d3360426e2582c4700401ca90ed

  • SHA256

    2d5687f20449b6fc1280a0a26059ccb70207ccf4307cf175b88d4de727e3b711

  • SHA512

    d123ca026f0d0ed11c84ce2b6564c8283634cacff2df4e904fc503a3c563862c62324ccd45903a5ec88729aba751f48140eb402babc687835503fa8f92289b4f

  • SSDEEP

    768:AMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAW:AbIvYvZEyFKF6N4yS+AQmZTl/5O

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      2d5687f20449b6fc1280a0a26059ccb70207ccf4307cf175b88d4de727e3b711

    • Size

      72KB

    • MD5

      8dd8738ee3bd1a49558cbfa559a6feaf

    • SHA1

      4ab9afc83ebb5d3360426e2582c4700401ca90ed

    • SHA256

      2d5687f20449b6fc1280a0a26059ccb70207ccf4307cf175b88d4de727e3b711

    • SHA512

      d123ca026f0d0ed11c84ce2b6564c8283634cacff2df4e904fc503a3c563862c62324ccd45903a5ec88729aba751f48140eb402babc687835503fa8f92289b4f

    • SSDEEP

      768:AMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAW:AbIvYvZEyFKF6N4yS+AQmZTl/5O

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks