General

  • Target

    41f8d75e8978ed377acc0f3024a64a70_NEAS

  • Size

    88KB

  • Sample

    240507-behb5abd4x

  • MD5

    41f8d75e8978ed377acc0f3024a64a70

  • SHA1

    fc0a433aa5e13b050ae39b18cf5c59bfd61818d9

  • SHA256

    b87a21e5ac07a9b9863ee2d9e265340bef3937e3a30a92ec74c8db618d4f50af

  • SHA512

    3cfcfab11e7accebb66dea3c2f4117e5fa5879b10682f4769d411b101fae24ba2e39f1896a0ac3cdabcc25a529d3bd5f966ff11bc3e87a5e6537ed600d609c14

  • SSDEEP

    768:bMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:bbIvYvZEyFKF6N4yS+AQmZTl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      41f8d75e8978ed377acc0f3024a64a70_NEAS

    • Size

      88KB

    • MD5

      41f8d75e8978ed377acc0f3024a64a70

    • SHA1

      fc0a433aa5e13b050ae39b18cf5c59bfd61818d9

    • SHA256

      b87a21e5ac07a9b9863ee2d9e265340bef3937e3a30a92ec74c8db618d4f50af

    • SHA512

      3cfcfab11e7accebb66dea3c2f4117e5fa5879b10682f4769d411b101fae24ba2e39f1896a0ac3cdabcc25a529d3bd5f966ff11bc3e87a5e6537ed600d609c14

    • SSDEEP

      768:bMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:bbIvYvZEyFKF6N4yS+AQmZTl/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks