neconyd | 9e1112f01b82a5708f20b7d62ee1238bb6ed0c8a9d6f827314b760d3b9c426b2 | Triage

Sharing

General

Target

9e1112f01b82a5708f20b7d62ee1238bb6ed0c8a9d6f827314b760d3b9c426b2
Size

72KB
Sample

240610-srbhsa1gnn
MD5

0e30c6952b41c8a2940ab5755bdac94d
SHA1

5d63f68eafd1d4f9708debb9f131031f1268366d
SHA256

9e1112f01b82a5708f20b7d62ee1238bb6ed0c8a9d6f827314b760d3b9c426b2
SHA512

062e786e5c7342eaa171dc4d09abd6fe09f97ffa55bd1f785a7e3bd9cfaedeb471c1a9a36b2f1b79f910bcf4033b858cf949d8be2a2c63e957ede21dab657ade
SSDEEP

768:VMEIvFGvoEr8LFK0ic46N47eSvYAHwmZGp6JXXlaa5uA:VbIvYvoEyFKF6N4ySAAQmZTl/5

Score

10^/10

neconyd trojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

- Target
  
  9e1112f01b82a5708f20b7d62ee1238bb6ed0c8a9d6f827314b760d3b9c426b2
- Size
  
  72KB
- MD5
  
  0e30c6952b41c8a2940ab5755bdac94d
- SHA1
  
  5d63f68eafd1d4f9708debb9f131031f1268366d
- SHA256
  
  9e1112f01b82a5708f20b7d62ee1238bb6ed0c8a9d6f827314b760d3b9c426b2
- SHA512
  
  062e786e5c7342eaa171dc4d09abd6fe09f97ffa55bd1f785a7e3bd9cfaedeb471c1a9a36b2f1b79f910bcf4033b858cf949d8be2a2c63e957ede21dab657ade
- SSDEEP
  
  768:VMEIvFGvoEr8LFK0ic46N47eSvYAHwmZGp6JXXlaa5uA:VbIvYvoEyFKF6N4ySAAQmZTl/5
Score

10^/10

neconyd trojan
- Neconyd
  Neconyd is a trojan written in C++.
  trojan neconyd
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2