General

  • Target

    f65bb6264cebd36aa5350bae067d94dc38dffa6a7509d338f4b052a7cfbb38d8

  • Size

    68KB

  • Sample

    240607-lbpxxafc24

  • MD5

    1da82dfad0ee64bae70a11d3dd349c7e

  • SHA1

    1e25befb8443370ca89d68e419306bf31a89dbdc

  • SHA256

    f65bb6264cebd36aa5350bae067d94dc38dffa6a7509d338f4b052a7cfbb38d8

  • SHA512

    88e80c33649e1f5f33225c27c6de50c0090e8874e84d3a7f6cd3df2ac510c2bef2e93b94f5bd2f645144c89ca17ce2628ba594f204ecc745c86b89a9ab591dae

  • SSDEEP

    1536:bd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:rdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      f65bb6264cebd36aa5350bae067d94dc38dffa6a7509d338f4b052a7cfbb38d8

    • Size

      68KB

    • MD5

      1da82dfad0ee64bae70a11d3dd349c7e

    • SHA1

      1e25befb8443370ca89d68e419306bf31a89dbdc

    • SHA256

      f65bb6264cebd36aa5350bae067d94dc38dffa6a7509d338f4b052a7cfbb38d8

    • SHA512

      88e80c33649e1f5f33225c27c6de50c0090e8874e84d3a7f6cd3df2ac510c2bef2e93b94f5bd2f645144c89ca17ce2628ba594f204ecc745c86b89a9ab591dae

    • SSDEEP

      1536:bd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:rdseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks