General

  • Target

    8916db0633635e5523152d88e1b96d1c02f731e078c32d082e4b03e2555cf8db

  • Size

    72KB

  • Sample

    240607-dbpm5shf24

  • MD5

    76719b21d3a43c317d19d98cfd0198a4

  • SHA1

    08be764cbd43e154eee1bf793fae225270eba090

  • SHA256

    8916db0633635e5523152d88e1b96d1c02f731e078c32d082e4b03e2555cf8db

  • SHA512

    cdf6bcd558004d4974d2a2fb5fc64b535286b66fd22ce21d566851e2ea78281710afbd96e0c4207f7047d37cd08e263e35bad5e1871a55488e06c4fd1d967e8a

  • SSDEEP

    768:RMEIvFGvoEr8LFK0ic46N47eSvYAHwmZGp6JXXlaa5uA:RbIvYvoEyFKF6N4ySAAQmZTl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      8916db0633635e5523152d88e1b96d1c02f731e078c32d082e4b03e2555cf8db

    • Size

      72KB

    • MD5

      76719b21d3a43c317d19d98cfd0198a4

    • SHA1

      08be764cbd43e154eee1bf793fae225270eba090

    • SHA256

      8916db0633635e5523152d88e1b96d1c02f731e078c32d082e4b03e2555cf8db

    • SHA512

      cdf6bcd558004d4974d2a2fb5fc64b535286b66fd22ce21d566851e2ea78281710afbd96e0c4207f7047d37cd08e263e35bad5e1871a55488e06c4fd1d967e8a

    • SSDEEP

      768:RMEIvFGvoEr8LFK0ic46N47eSvYAHwmZGp6JXXlaa5uA:RbIvYvoEyFKF6N4ySAAQmZTl/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks