General

  • Target

    13f7a091693f7b6cc83e545eedb83c4b_JaffaCakes118

  • Size

    63KB

  • Sample

    240627-ab7bea1fpd

  • MD5

    13f7a091693f7b6cc83e545eedb83c4b

  • SHA1

    6342967f8832dce07bf84af406ba68789d9bfd53

  • SHA256

    274f79c0d4696619ec8abd5acd11b55b3b2578db9545c44f3d0be2b13b523e2a

  • SHA512

    16a2124a3d3ed52efabc4959b74242896c78d38ca518aec4f9fe1c8c2eba74a0f4c9ee6e127822d9970c382f42ebb4d81c5a779370d9b41d61c1fc74a3d1d3e2

  • SSDEEP

    768:GfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:GfbIvYvZEyFKF6N4yS+AQmZTl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      13f7a091693f7b6cc83e545eedb83c4b_JaffaCakes118

    • Size

      63KB

    • MD5

      13f7a091693f7b6cc83e545eedb83c4b

    • SHA1

      6342967f8832dce07bf84af406ba68789d9bfd53

    • SHA256

      274f79c0d4696619ec8abd5acd11b55b3b2578db9545c44f3d0be2b13b523e2a

    • SHA512

      16a2124a3d3ed52efabc4959b74242896c78d38ca518aec4f9fe1c8c2eba74a0f4c9ee6e127822d9970c382f42ebb4d81c5a779370d9b41d61c1fc74a3d1d3e2

    • SSDEEP

      768:GfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:GfbIvYvZEyFKF6N4yS+AQmZTl/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks