General

  • Target

    224636725e689db81571b84da0cd63573091ff2b86b7d363cdd0e18edf171611

  • Size

    35KB

  • Sample

    240702-ycceeswbkf

  • MD5

    c694d03ad1017754a0cf143b541adf1d

  • SHA1

    8626e7a91faabbbb0887f6d69d0a4c5b81e1928c

  • SHA256

    224636725e689db81571b84da0cd63573091ff2b86b7d363cdd0e18edf171611

  • SHA512

    2b0784f96bcb3accbe44957b15e6f118bc8eaada01907553c6d41e7e569a3ea9beec519be04da62238ed4fd86a867febf1ae0c7e107827482dfa2b7e27454a57

  • SSDEEP

    768:f6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:i8Z0kA7FHlO2OwOTUtKjpB

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      224636725e689db81571b84da0cd63573091ff2b86b7d363cdd0e18edf171611

    • Size

      35KB

    • MD5

      c694d03ad1017754a0cf143b541adf1d

    • SHA1

      8626e7a91faabbbb0887f6d69d0a4c5b81e1928c

    • SHA256

      224636725e689db81571b84da0cd63573091ff2b86b7d363cdd0e18edf171611

    • SHA512

      2b0784f96bcb3accbe44957b15e6f118bc8eaada01907553c6d41e7e569a3ea9beec519be04da62238ed4fd86a867febf1ae0c7e107827482dfa2b7e27454a57

    • SSDEEP

      768:f6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:i8Z0kA7FHlO2OwOTUtKjpB

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks