neconyd | 40e8592e8a40e3b2f8c447c772ec31fd81af2341c0fe67b1084cb2fcae7bf5c7 | Triage

Sharing

General

Target

1209a166dedb215872dfef16e02843db_JaffaCakes118
Size

63KB
Sample

240626-p6a9savglc
MD5

1209a166dedb215872dfef16e02843db
SHA1

42b38a6aa6b8550a6e12ef14a6defe79c1f23f70
SHA256

40e8592e8a40e3b2f8c447c772ec31fd81af2341c0fe67b1084cb2fcae7bf5c7
SHA512

e911f84e61df8ee07d7dd765e29c24db9d653438011beffffaf8830afc748bae5dc6805081590d103225bedde69ab219799e406998155e38e7450781aed5f76f
SSDEEP

768:KMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:KbIvYvZEyFKF6N4yS+AQmZTl/5

Score

10^/10

neconyd trojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

- Target
  
  1209a166dedb215872dfef16e02843db_JaffaCakes118
- Size
  
  63KB
- MD5
  
  1209a166dedb215872dfef16e02843db
- SHA1
  
  42b38a6aa6b8550a6e12ef14a6defe79c1f23f70
- SHA256
  
  40e8592e8a40e3b2f8c447c772ec31fd81af2341c0fe67b1084cb2fcae7bf5c7
- SHA512
  
  e911f84e61df8ee07d7dd765e29c24db9d653438011beffffaf8830afc748bae5dc6805081590d103225bedde69ab219799e406998155e38e7450781aed5f76f
- SSDEEP
  
  768:KMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:KbIvYvZEyFKF6N4yS+AQmZTl/5
Score

10^/10

neconyd trojan
- Neconyd
  Neconyd is a trojan written in C++.
  trojan neconyd
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2