neconyd | c96262f0d84e71e3ca50a1877091b9692e0e712d7ea312fbf7f6d25044d2f267 | Triage

Sharing

General

Target

c96262f0d84e71e3ca50a1877091b9692e0e712d7ea312fbf7f6d25044d2f267
Size

80KB
Sample

240629-c71vlsyhqa
MD5

94a134910fa0cef7cdb02cc4432ad865
SHA1

9d878b7864fe32eec7690342e0647eaa0bfc2b3f
SHA256

c96262f0d84e71e3ca50a1877091b9692e0e712d7ea312fbf7f6d25044d2f267
SHA512

ec103e5c3d2bf74a6560ff4cc4b071f569bdc83c79a2d500ab20588aa2fdc31e7c6990d50b2593a6cdc96c32ed869c6dd102de50bcf1e20efb9af3a97cf7d3b1
SSDEEP

768:5fMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:5fbIvYvZEyFKF6N4yS+AQmZTl/5

Score

10^/10

neconyd trojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

- Target
  
  c96262f0d84e71e3ca50a1877091b9692e0e712d7ea312fbf7f6d25044d2f267
- Size
  
  80KB
- MD5
  
  94a134910fa0cef7cdb02cc4432ad865
- SHA1
  
  9d878b7864fe32eec7690342e0647eaa0bfc2b3f
- SHA256
  
  c96262f0d84e71e3ca50a1877091b9692e0e712d7ea312fbf7f6d25044d2f267
- SHA512
  
  ec103e5c3d2bf74a6560ff4cc4b071f569bdc83c79a2d500ab20588aa2fdc31e7c6990d50b2593a6cdc96c32ed869c6dd102de50bcf1e20efb9af3a97cf7d3b1
- SSDEEP
  
  768:5fMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:5fbIvYvZEyFKF6N4yS+AQmZTl/5
Score

10^/10

neconyd trojan
- Neconyd
  Neconyd is a trojan written in C++.
  trojan neconyd
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2