General

  • Target

    528e282816049332910b3e75887beb188e287b494dc0d5da3702513ba7b1f356

  • Size

    68KB

  • Sample

    240610-pb2s9aah54

  • MD5

    3dc194fb84c29abbd5632bd808c8035d

  • SHA1

    05829f5941df78d48aeaa36af54e1b55813ed996

  • SHA256

    528e282816049332910b3e75887beb188e287b494dc0d5da3702513ba7b1f356

  • SHA512

    ae94c0bedad38d6844530d4d61a0d76bf42a07c7d2bc38a132db4eb3e74329e1c59562937ee6f5ac9f6b57df65f8490eb669bc2ea1bd6739b04b6c8fc9888202

  • SSDEEP

    1536:kd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:cdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      528e282816049332910b3e75887beb188e287b494dc0d5da3702513ba7b1f356

    • Size

      68KB

    • MD5

      3dc194fb84c29abbd5632bd808c8035d

    • SHA1

      05829f5941df78d48aeaa36af54e1b55813ed996

    • SHA256

      528e282816049332910b3e75887beb188e287b494dc0d5da3702513ba7b1f356

    • SHA512

      ae94c0bedad38d6844530d4d61a0d76bf42a07c7d2bc38a132db4eb3e74329e1c59562937ee6f5ac9f6b57df65f8490eb669bc2ea1bd6739b04b6c8fc9888202

    • SSDEEP

      1536:kd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:cdseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks