General

  • Target

    33a0f338b181b65574d11848c7d3d2cc9db9ccfec1f6cedd766793b0de013eb0

  • Size

    88KB

  • Sample

    240628-y1q8gstflj

  • MD5

    a8ffbf1af6a479619a494871ee937dea

  • SHA1

    321aff5d673d73a187ef8c3656197a4861deedae

  • SHA256

    33a0f338b181b65574d11848c7d3d2cc9db9ccfec1f6cedd766793b0de013eb0

  • SHA512

    40347e407de9c109a8ded01fcb453558b35c94f7cda2e6af3e2dbaef0cae90f8ee53ed842a8b96df93edbc8ef4e8bd6195969b57f2c504ec4394aabc6c5e6a85

  • SSDEEP

    1536:hd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:RdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      33a0f338b181b65574d11848c7d3d2cc9db9ccfec1f6cedd766793b0de013eb0

    • Size

      88KB

    • MD5

      a8ffbf1af6a479619a494871ee937dea

    • SHA1

      321aff5d673d73a187ef8c3656197a4861deedae

    • SHA256

      33a0f338b181b65574d11848c7d3d2cc9db9ccfec1f6cedd766793b0de013eb0

    • SHA512

      40347e407de9c109a8ded01fcb453558b35c94f7cda2e6af3e2dbaef0cae90f8ee53ed842a8b96df93edbc8ef4e8bd6195969b57f2c504ec4394aabc6c5e6a85

    • SSDEEP

      1536:hd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:RdseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks