neconyd | 634c227bc08b7a01f9f717c8d7787fd16bbf3d3b2df863707953f06da283be7a | Triage

Sharing

General

Target

634c227bc08b7a01f9f717c8d7787fd16bbf3d3b2df863707953f06da283be7a
Size

76KB
Sample

240607-ae336aeb3z
MD5

e291b65c07c182fd17761b6cd2a9d22d
SHA1

c202ef9a6a2290ae08e357c98c3dd944a20a3712
SHA256

634c227bc08b7a01f9f717c8d7787fd16bbf3d3b2df863707953f06da283be7a
SHA512

97c2106d56a47505460a890963d3cec7789fd91972f4aa4dc691deca19fbc76e02b48823ed0be94fad2236850fe490a6d052aba7cbe484ca5b62e5b7f1c02b18
SSDEEP

768:1MEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAW:1bIvYvZEyFKF6N4yS+AQmZTl/5O

Score

10^/10

neconyd trojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

- Target
  
  634c227bc08b7a01f9f717c8d7787fd16bbf3d3b2df863707953f06da283be7a
- Size
  
  76KB
- MD5
  
  e291b65c07c182fd17761b6cd2a9d22d
- SHA1
  
  c202ef9a6a2290ae08e357c98c3dd944a20a3712
- SHA256
  
  634c227bc08b7a01f9f717c8d7787fd16bbf3d3b2df863707953f06da283be7a
- SHA512
  
  97c2106d56a47505460a890963d3cec7789fd91972f4aa4dc691deca19fbc76e02b48823ed0be94fad2236850fe490a6d052aba7cbe484ca5b62e5b7f1c02b18
- SSDEEP
  
  768:1MEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAW:1bIvYvZEyFKF6N4yS+AQmZTl/5O
Score

10^/10

neconyd trojan
- Neconyd
  Neconyd is a trojan written in C++.
  trojan neconyd
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2