General

  • Target

    3528c59d43e7da38d5d09c44e15be5d0_NEAS

  • Size

    76KB

  • Sample

    240506-3xcyxaca44

  • MD5

    3528c59d43e7da38d5d09c44e15be5d0

  • SHA1

    195073692dd2cf372fcdf7ecd4d8c8b186391a9e

  • SHA256

    2d76d5ddf0ceff3364c6fe3e39972bf251401e45640b1153bebea14b3917c951

  • SHA512

    a6db3d80621c539736b271cc8d422ba7e6c2a20c2fb88bc4147ab77156a583850a8c5cae58a3b9ab024d66d7c9ef32262451dccbd107a5fbf967d3f52065cfbe

  • SSDEEP

    768:EMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAW:EbIvYvZEyFKF6N4yS+AQmZTl/5O

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      3528c59d43e7da38d5d09c44e15be5d0_NEAS

    • Size

      76KB

    • MD5

      3528c59d43e7da38d5d09c44e15be5d0

    • SHA1

      195073692dd2cf372fcdf7ecd4d8c8b186391a9e

    • SHA256

      2d76d5ddf0ceff3364c6fe3e39972bf251401e45640b1153bebea14b3917c951

    • SHA512

      a6db3d80621c539736b271cc8d422ba7e6c2a20c2fb88bc4147ab77156a583850a8c5cae58a3b9ab024d66d7c9ef32262451dccbd107a5fbf967d3f52065cfbe

    • SSDEEP

      768:EMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAW:EbIvYvZEyFKF6N4yS+AQmZTl/5O

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks