General

  • Target

    b60593fdc580be38e0b6ea52a7197b8b03d50c593d04b19d9bd894e41d59e2fc

  • Size

    84KB

  • Sample

    240617-bpptys1hpk

  • MD5

    81359222ce7e90983c8cf589e0b9ed74

  • SHA1

    8637ea117331646850b117942138c602c28a4f04

  • SHA256

    b60593fdc580be38e0b6ea52a7197b8b03d50c593d04b19d9bd894e41d59e2fc

  • SHA512

    9cd3c2bd9ca77e5a34d4d30548d4517c749e7d7c6f79c957ea3e52d5758a8ecb32f2022ef200c5818bf53aab111482baf15be9c4f8157610d3451380e4a9cf06

  • SSDEEP

    1536:Qd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:QdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      b60593fdc580be38e0b6ea52a7197b8b03d50c593d04b19d9bd894e41d59e2fc

    • Size

      84KB

    • MD5

      81359222ce7e90983c8cf589e0b9ed74

    • SHA1

      8637ea117331646850b117942138c602c28a4f04

    • SHA256

      b60593fdc580be38e0b6ea52a7197b8b03d50c593d04b19d9bd894e41d59e2fc

    • SHA512

      9cd3c2bd9ca77e5a34d4d30548d4517c749e7d7c6f79c957ea3e52d5758a8ecb32f2022ef200c5818bf53aab111482baf15be9c4f8157610d3451380e4a9cf06

    • SSDEEP

      1536:Qd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:QdseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks