Overview

overview

10

Static

static

10

987d11c803...1a.exe

windows7-x64

10

987d11c803...1a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    987d11c803f38d8b39f5b2e26ec624459613f4b677f34a443d488d48fec0301a

  • Size

    35KB

  • Sample

    240619-avlh2svaql

  • MD5

    7b1a9a77fe61b309f0bf17471fd24bb9

  • SHA1

    8431829610aa44069eb9ae7003a0c321caef3a9a

  • SHA256

    987d11c803f38d8b39f5b2e26ec624459613f4b677f34a443d488d48fec0301a

  • SHA512

    d5e14b65408a7e842e8e00c26db4d045270c3281862e6cbbc13ab78e8ef10642170099c55d6f52b8ba593399c87f091e65c5acd06bec652a94fb837b41397726

  • SSDEEP

    768:l6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:o8Z0kA7FHlO2OwOTUtKjpB

Score
10/10
neconydtrojanupx

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      987d11c803f38d8b39f5b2e26ec624459613f4b677f34a443d488d48fec0301a

    • Size

      35KB

    • MD5

      7b1a9a77fe61b309f0bf17471fd24bb9

    • SHA1

      8431829610aa44069eb9ae7003a0c321caef3a9a

    • SHA256

      987d11c803f38d8b39f5b2e26ec624459613f4b677f34a443d488d48fec0301a

    • SHA512

      d5e14b65408a7e842e8e00c26db4d045270c3281862e6cbbc13ab78e8ef10642170099c55d6f52b8ba593399c87f091e65c5acd06bec652a94fb837b41397726

    • SSDEEP

      768:l6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:o8Z0kA7FHlO2OwOTUtKjpB

    Score
    10/10
    neconydtrojanupx

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks