General

  • Target

    65ff8b5e462c79b1f9f713b46d86a4f221482fa5ddf73ae4ef363bdf946d0ea1

  • Size

    35KB

  • Sample

    240705-2dmtbszfkd

  • MD5

    7d355018f48299a2e6d21f07776ce8a3

  • SHA1

    f62c0efb3629aef6cd1692bff337b3afb27cf540

  • SHA256

    65ff8b5e462c79b1f9f713b46d86a4f221482fa5ddf73ae4ef363bdf946d0ea1

  • SHA512

    94e7dd3b9f01ccc52a54af0fae3ef37b1db363d6bf5a4463b8843fd19a8ecd45ee0d8ec4a47ff106be525dd6dd9bc940392746a62c45516174f881d0f1e0012d

  • SSDEEP

    768:u6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:18Z0kA7FHlO2OwOTUtKjpB

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      65ff8b5e462c79b1f9f713b46d86a4f221482fa5ddf73ae4ef363bdf946d0ea1

    • Size

      35KB

    • MD5

      7d355018f48299a2e6d21f07776ce8a3

    • SHA1

      f62c0efb3629aef6cd1692bff337b3afb27cf540

    • SHA256

      65ff8b5e462c79b1f9f713b46d86a4f221482fa5ddf73ae4ef363bdf946d0ea1

    • SHA512

      94e7dd3b9f01ccc52a54af0fae3ef37b1db363d6bf5a4463b8843fd19a8ecd45ee0d8ec4a47ff106be525dd6dd9bc940392746a62c45516174f881d0f1e0012d

    • SSDEEP

      768:u6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:18Z0kA7FHlO2OwOTUtKjpB

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks