Overview

overview

10

Static

static

10

8ffd1c72c4...0N.exe

windows7-x64

10

8ffd1c72c4...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8ffd1c72c487afdf54946c7dfec08190N.exe

  • Size

    35KB

  • Sample

    240727-ez63rsxclr

  • MD5

    8ffd1c72c487afdf54946c7dfec08190

  • SHA1

    2bf9a220075168ff8794d379eadae2060eff146c

  • SHA256

    a287dc693e96236b3f8c80db9cd65e15751b4fe8f4665eda2141c1eacea72741

  • SHA512

    f9bdd612c06c6b31e13373ca5dce959d8cdc6a6849bdb189a9fb70adec413b6d34b99bfbe404ba542b61e515d87058a9674934ca83d5eb2e28bc161cdbe0754e

  • SSDEEP

    768:z6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:u8Z0kA7FHlO2OwOTUtKjpB

Score
10/10
neconyddiscoverytrojanupx

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      8ffd1c72c487afdf54946c7dfec08190N.exe

    • Size

      35KB

    • MD5

      8ffd1c72c487afdf54946c7dfec08190

    • SHA1

      2bf9a220075168ff8794d379eadae2060eff146c

    • SHA256

      a287dc693e96236b3f8c80db9cd65e15751b4fe8f4665eda2141c1eacea72741

    • SHA512

      f9bdd612c06c6b31e13373ca5dce959d8cdc6a6849bdb189a9fb70adec413b6d34b99bfbe404ba542b61e515d87058a9674934ca83d5eb2e28bc161cdbe0754e

    • SSDEEP

      768:z6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:u8Z0kA7FHlO2OwOTUtKjpB

    Score
    10/10
    neconyddiscoverytrojanupx

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks