General

  • Target

    NEAS.c6b14d562571fe788ddcbe50427013b0_JC.exe

  • Size

    68KB

  • Sample

    231022-qqw2zsae68

  • MD5

    c6b14d562571fe788ddcbe50427013b0

  • SHA1

    3c87ef31aa16c8b4f13fbcb78ffb2c52e112fd27

  • SHA256

    9f523f828ba2d53c53fcca4b9e242e49259e6c54b239aca38c081bf9d74525b5

  • SHA512

    89aacdc53a27c56cbc01bbd538cf6469051e47f4f60298ee9d7aaf04de2cc0c86df03904a9a612c59301bbe6053ebef2f77ade1de2ae38ded0586a8d6c2d3203

  • SSDEEP

    1536:jd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:DdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      NEAS.c6b14d562571fe788ddcbe50427013b0_JC.exe

    • Size

      68KB

    • MD5

      c6b14d562571fe788ddcbe50427013b0

    • SHA1

      3c87ef31aa16c8b4f13fbcb78ffb2c52e112fd27

    • SHA256

      9f523f828ba2d53c53fcca4b9e242e49259e6c54b239aca38c081bf9d74525b5

    • SHA512

      89aacdc53a27c56cbc01bbd538cf6469051e47f4f60298ee9d7aaf04de2cc0c86df03904a9a612c59301bbe6053ebef2f77ade1de2ae38ded0586a8d6c2d3203

    • SSDEEP

      1536:jd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:DdseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks