neconyd | a89b54479e26b56962e567030f0936fdd6529f005349364b944c1c956ee5f563 | Triage

Sharing

General

Target

a89b54479e26b56962e567030f0936fdd6529f005349364b944c1c956ee5f563
Size

92KB
Sample

240619-bl4hyavgjl
MD5

d11f4132b8f89e5afa2888c8bfd5ca01
SHA1

6781b5814b7c571046dbf3e82d8cf8051c6849de
SHA256

a89b54479e26b56962e567030f0936fdd6529f005349364b944c1c956ee5f563
SHA512

8192aa9868839f2acc3488dd8bc630a853f0850da6417262ace1cf9c186e07bb32af17bf28afd3121c7cf6b71d6521cde7f0f636027e789b443eaa1e66155103
SSDEEP

1536:fd9dseIOcEE3bIvYvZEyF4EEOF6N4yS+AQmZTl/5:XdseIO/EZEyFjEOFqTiQm5l/5

Score

10^/10

neconyd trojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

- Target
  
  a89b54479e26b56962e567030f0936fdd6529f005349364b944c1c956ee5f563
- Size
  
  92KB
- MD5
  
  d11f4132b8f89e5afa2888c8bfd5ca01
- SHA1
  
  6781b5814b7c571046dbf3e82d8cf8051c6849de
- SHA256
  
  a89b54479e26b56962e567030f0936fdd6529f005349364b944c1c956ee5f563
- SHA512
  
  8192aa9868839f2acc3488dd8bc630a853f0850da6417262ace1cf9c186e07bb32af17bf28afd3121c7cf6b71d6521cde7f0f636027e789b443eaa1e66155103
- SSDEEP
  
  1536:fd9dseIOcEE3bIvYvZEyF4EEOF6N4yS+AQmZTl/5:XdseIO/EZEyFjEOFqTiQm5l/5
Score

10^/10

neconyd trojan
- Neconyd
  Neconyd is a trojan written in C++.
  trojan neconyd
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2