neconyd | e17aa7f26a7ec25f9c750a49075df6f0727950c93acabb331db504b0cad34691 | Triage

Sharing

General

Target

e17aa7f26a7ec25f9c750a49075df6f0727950c93acabb331db504b0cad34691
Size

84KB
Sample

240610-w3kglswbpb
MD5

a754e5e640b0d24e76d3291f47f669fd
SHA1

f9dbbc8aabe9ba5a207d564513796ecfc80649f0
SHA256

e17aa7f26a7ec25f9c750a49075df6f0727950c93acabb331db504b0cad34691
SHA512

d55b09431dbb1971002c9cc0cd1bd893c459e7203626abcd296720d51cc6d255bf142b8e963e379edc9ee895b1f0ffbe911f29614f5c07d087920d18bb73500c
SSDEEP

1536:6d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:adseIOMEZEyFjEOFqTiQm5l/5

Score

10^/10

neconyd trojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

- Target
  
  e17aa7f26a7ec25f9c750a49075df6f0727950c93acabb331db504b0cad34691
- Size
  
  84KB
- MD5
  
  a754e5e640b0d24e76d3291f47f669fd
- SHA1
  
  f9dbbc8aabe9ba5a207d564513796ecfc80649f0
- SHA256
  
  e17aa7f26a7ec25f9c750a49075df6f0727950c93acabb331db504b0cad34691
- SHA512
  
  d55b09431dbb1971002c9cc0cd1bd893c459e7203626abcd296720d51cc6d255bf142b8e963e379edc9ee895b1f0ffbe911f29614f5c07d087920d18bb73500c
- SSDEEP
  
  1536:6d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:adseIOMEZEyFjEOFqTiQm5l/5
Score

10^/10

neconyd trojan
- Neconyd
  Neconyd is a trojan written in C++.
  trojan neconyd
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2