Overview

overview

10

Static

static

10

b3bb1a6e4e...9e.exe

windows7-x64

10

b3bb1a6e4e...9e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b3bb1a6e4e845875cb88ad6ef1ce3874e5f437c1d3530a787fd2582ee8cd4b9e

  • Size

    68KB

  • Sample

    240802-elcxrszbld

  • MD5

    b530c4fe3f111bdddf76daa295c23bd7

  • SHA1

    e74db6543df2ecd0de6c54d769159d82643aa730

  • SHA256

    b3bb1a6e4e845875cb88ad6ef1ce3874e5f437c1d3530a787fd2582ee8cd4b9e

  • SHA512

    09cb31db2e4d9cc96310f843d99631b3b5a28c86908da82f684cc9469a64f9584b119a32979283a02c3f6ae94d5653b86ceee4937107a3c2388bd054b6072dc9

  • SSDEEP

    1536:Gd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:+dseIOMEZEyFjEOFqTiQm5l/5

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      b3bb1a6e4e845875cb88ad6ef1ce3874e5f437c1d3530a787fd2582ee8cd4b9e

    • Size

      68KB

    • MD5

      b530c4fe3f111bdddf76daa295c23bd7

    • SHA1

      e74db6543df2ecd0de6c54d769159d82643aa730

    • SHA256

      b3bb1a6e4e845875cb88ad6ef1ce3874e5f437c1d3530a787fd2582ee8cd4b9e

    • SHA512

      09cb31db2e4d9cc96310f843d99631b3b5a28c86908da82f684cc9469a64f9584b119a32979283a02c3f6ae94d5653b86ceee4937107a3c2388bd054b6072dc9

    • SSDEEP

      1536:Gd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:+dseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks