General

  • Target

    73ea4c5972f35e89bc2d280177cd81563963c8ee9d83e4a6ba48c872defca2cb

  • Size

    61KB

  • Sample

    240607-bme7qsgb37

  • MD5

    bf8ec60884d92fce0c7c71d52cc164d2

  • SHA1

    42c5ab4c6ee6b92939a973a7622a95ee9b1da889

  • SHA256

    73ea4c5972f35e89bc2d280177cd81563963c8ee9d83e4a6ba48c872defca2cb

  • SHA512

    826daa8658680feaf798ad11421cc12a1340803f46dea89c94776d465e1b0a7e3b7137809e14979d700e2c32dc10c40cb7b6408bafa5c32a553c5e7b457d471d

  • SSDEEP

    768:yMEIvFGvZEr8LFK0ic46N47eSdYAHwmZ7Bp6JXXlaa5uA:ybIvYvZEyFKF6N4yS+AQmZIl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      73ea4c5972f35e89bc2d280177cd81563963c8ee9d83e4a6ba48c872defca2cb

    • Size

      61KB

    • MD5

      bf8ec60884d92fce0c7c71d52cc164d2

    • SHA1

      42c5ab4c6ee6b92939a973a7622a95ee9b1da889

    • SHA256

      73ea4c5972f35e89bc2d280177cd81563963c8ee9d83e4a6ba48c872defca2cb

    • SHA512

      826daa8658680feaf798ad11421cc12a1340803f46dea89c94776d465e1b0a7e3b7137809e14979d700e2c32dc10c40cb7b6408bafa5c32a553c5e7b457d471d

    • SSDEEP

      768:yMEIvFGvZEr8LFK0ic46N47eSdYAHwmZ7Bp6JXXlaa5uA:ybIvYvZEyFKF6N4yS+AQmZIl/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks