General

  • Target

    NEAS.ee29d72cef5c9bdf8544ba520bb30f01.exe

  • Size

    84KB

  • Sample

    231031-kk5t2scf49

  • MD5

    ee29d72cef5c9bdf8544ba520bb30f01

  • SHA1

    6a74572b187eb9db8118e43cb243f20388201fea

  • SHA256

    fda238575d9bb4b30bce6fb14eb7c4762aa1edd3a8b19faad3b3cd216ae96fd7

  • SHA512

    8d00997e2806aedcc6aa4dea59fb41217cbe4aa6a4dfb075d5b0fd4ea1b4926e8d9e0eecf82e4396cc22105ccf995a729c257e940430a93277107ca5d3827b9b

  • SSDEEP

    1536:Ad9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:gdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      NEAS.ee29d72cef5c9bdf8544ba520bb30f01.exe

    • Size

      84KB

    • MD5

      ee29d72cef5c9bdf8544ba520bb30f01

    • SHA1

      6a74572b187eb9db8118e43cb243f20388201fea

    • SHA256

      fda238575d9bb4b30bce6fb14eb7c4762aa1edd3a8b19faad3b3cd216ae96fd7

    • SHA512

      8d00997e2806aedcc6aa4dea59fb41217cbe4aa6a4dfb075d5b0fd4ea1b4926e8d9e0eecf82e4396cc22105ccf995a729c257e940430a93277107ca5d3827b9b

    • SSDEEP

      1536:Ad9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:gdseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks