General

  • Target

    e8148bf596a08a0712ee4bd7e7d69c20_NEAS

  • Size

    35KB

  • Sample

    240507-vq8s1aff8v

  • MD5

    e8148bf596a08a0712ee4bd7e7d69c20

  • SHA1

    3f11f5d6758ea682d7c3a28095366afcbbb4a8f3

  • SHA256

    b5bdba6c1f26c2e7e78968e2706042af016bb52b80dc3b54934c57d94cfdc6b0

  • SHA512

    4dd93b6a28fab019192513c18cf0096a0b7305d7258b702731bb63bea4245486446a0e0578e68f681cb7d724aa7a9eeab86bf1eee11ed94c7c265919adb84327

  • SSDEEP

    768:66vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:58Z0kA7FHlO2OwOTUtKjpB

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      e8148bf596a08a0712ee4bd7e7d69c20_NEAS

    • Size

      35KB

    • MD5

      e8148bf596a08a0712ee4bd7e7d69c20

    • SHA1

      3f11f5d6758ea682d7c3a28095366afcbbb4a8f3

    • SHA256

      b5bdba6c1f26c2e7e78968e2706042af016bb52b80dc3b54934c57d94cfdc6b0

    • SHA512

      4dd93b6a28fab019192513c18cf0096a0b7305d7258b702731bb63bea4245486446a0e0578e68f681cb7d724aa7a9eeab86bf1eee11ed94c7c265919adb84327

    • SSDEEP

      768:66vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:58Z0kA7FHlO2OwOTUtKjpB

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks