General

  • Target

    0b819215f9d3f2b11eda97811ddf7e2ac344dabe7773f4427409bca8c9c75168

  • Size

    84KB

  • Sample

    240610-xdeqhawdnb

  • MD5

    328bfc63f91c19f2e57d838390489ce5

  • SHA1

    74ee6d56746143305aa25f2258c4e44f8cde58e0

  • SHA256

    0b819215f9d3f2b11eda97811ddf7e2ac344dabe7773f4427409bca8c9c75168

  • SHA512

    37d04ff46530df8fa65a02985fb8c78854782ea03907b7369f88711bc566f54dd9f2fe1a7a9eb92e00a3ebd5646b253637261b3f941440ec41ba21d0438b4071

  • SSDEEP

    1536:ed9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:GdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      0b819215f9d3f2b11eda97811ddf7e2ac344dabe7773f4427409bca8c9c75168

    • Size

      84KB

    • MD5

      328bfc63f91c19f2e57d838390489ce5

    • SHA1

      74ee6d56746143305aa25f2258c4e44f8cde58e0

    • SHA256

      0b819215f9d3f2b11eda97811ddf7e2ac344dabe7773f4427409bca8c9c75168

    • SHA512

      37d04ff46530df8fa65a02985fb8c78854782ea03907b7369f88711bc566f54dd9f2fe1a7a9eb92e00a3ebd5646b253637261b3f941440ec41ba21d0438b4071

    • SSDEEP

      1536:ed9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:GdseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks