General

  • Target

    NEAS.69dc3bec0e7d37dad8dc2c3276d06380.exe

  • Size

    81KB

  • Sample

    231105-jbzq1aec22

  • MD5

    69dc3bec0e7d37dad8dc2c3276d06380

  • SHA1

    21cce4528dcdb1449c7040ed7bc23b69526947a0

  • SHA256

    2d1c98fb8fdd0db641416e76c1ed7dce5c04bd543d75bf8c8b46dec3512693d3

  • SHA512

    031ba9150aa0ff183dc782d882537edb39abb9e2ff5a49290533d880ae2b3c97c127e0fe6af1686b012802994c33d0c391ed007dca694e2cda3e43f47f6f82fc

  • SSDEEP

    1536:Xd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:fdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      NEAS.69dc3bec0e7d37dad8dc2c3276d06380.exe

    • Size

      81KB

    • MD5

      69dc3bec0e7d37dad8dc2c3276d06380

    • SHA1

      21cce4528dcdb1449c7040ed7bc23b69526947a0

    • SHA256

      2d1c98fb8fdd0db641416e76c1ed7dce5c04bd543d75bf8c8b46dec3512693d3

    • SHA512

      031ba9150aa0ff183dc782d882537edb39abb9e2ff5a49290533d880ae2b3c97c127e0fe6af1686b012802994c33d0c391ed007dca694e2cda3e43f47f6f82fc

    • SSDEEP

      1536:Xd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:fdseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks