General

  • Target

    NEAS.42ca8459c925ee7a5bad2874c43d0730.exe

  • Size

    61KB

  • Sample

    231115-a6r5zaag4w

  • MD5

    42ca8459c925ee7a5bad2874c43d0730

  • SHA1

    202b0c4141f5b6e3920c6a41c2bac22c6ca9f66e

  • SHA256

    80ef1d24178c3831c71e1a4b2b4401f60b237698efe8f8047ee4f97bd9f29b5c

  • SHA512

    3ea41efdb54c65e42eb12308f2d412a71192c831d6e91162523fb3a797768708c2b153b5a91fa59364398dd8cfd473d9bb4c220c7a8e78f9c55c616693a98714

  • SSDEEP

    1536:rd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZfl/5:bdseIOMEZEyFjEOFqTiQm1l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      NEAS.42ca8459c925ee7a5bad2874c43d0730.exe

    • Size

      61KB

    • MD5

      42ca8459c925ee7a5bad2874c43d0730

    • SHA1

      202b0c4141f5b6e3920c6a41c2bac22c6ca9f66e

    • SHA256

      80ef1d24178c3831c71e1a4b2b4401f60b237698efe8f8047ee4f97bd9f29b5c

    • SHA512

      3ea41efdb54c65e42eb12308f2d412a71192c831d6e91162523fb3a797768708c2b153b5a91fa59364398dd8cfd473d9bb4c220c7a8e78f9c55c616693a98714

    • SSDEEP

      1536:rd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZfl/5:bdseIOMEZEyFjEOFqTiQm1l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks