General

  • Target

    NEAS.e9d2f57bdeea9f71196568d8b88d7960_JC.exe

  • Size

    64KB

  • Sample

    231105-fbkejach46

  • MD5

    e9d2f57bdeea9f71196568d8b88d7960

  • SHA1

    25ca04b51954d75ebe69f04ac67c0ba525f991e4

  • SHA256

    65dc4cc90b665845b332406c1e8cbfc2f96b9c1be2dc402ee41ada5fc052cdf0

  • SHA512

    0acd6ad2d286b81463d1e3f4a339f6cb88c55f0aa2efb858b3fd1f7eb257e99e130b10e005f17dd988b397b5d83661d3da83f88205742a4387605348894cfe1a

  • SSDEEP

    1536:Xd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:fdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      NEAS.e9d2f57bdeea9f71196568d8b88d7960_JC.exe

    • Size

      64KB

    • MD5

      e9d2f57bdeea9f71196568d8b88d7960

    • SHA1

      25ca04b51954d75ebe69f04ac67c0ba525f991e4

    • SHA256

      65dc4cc90b665845b332406c1e8cbfc2f96b9c1be2dc402ee41ada5fc052cdf0

    • SHA512

      0acd6ad2d286b81463d1e3f4a339f6cb88c55f0aa2efb858b3fd1f7eb257e99e130b10e005f17dd988b397b5d83661d3da83f88205742a4387605348894cfe1a

    • SSDEEP

      1536:Xd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:fdseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks