Overview

overview

10

Static

static

10

1b96841b84...58.exe

windows7-x64

10

1b96841b84...58.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1b96841b84c4b62f8a5a4b099ed9ecb7ab661d833693c872f92f81169eb6d458

  • Size

    84KB

  • Sample

    240814-x2sbhavarp

  • MD5

    d62eaaefa585328121e5a240d57708d6

  • SHA1

    7113f5742f6866246b642c6daf3b68d2ea5e3368

  • SHA256

    1b96841b84c4b62f8a5a4b099ed9ecb7ab661d833693c872f92f81169eb6d458

  • SHA512

    3229d70bb369d019c1f52f4f53f7fdf7989772222dc460aa5488c0928341f910ed8b5273f89caaaba62f7608c8f4e58ee29667585473e14587a3942a19073602

  • SSDEEP

    1536:ud9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:2dseIOMEZEyFjEOFqTiQm5l/5

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      1b96841b84c4b62f8a5a4b099ed9ecb7ab661d833693c872f92f81169eb6d458

    • Size

      84KB

    • MD5

      d62eaaefa585328121e5a240d57708d6

    • SHA1

      7113f5742f6866246b642c6daf3b68d2ea5e3368

    • SHA256

      1b96841b84c4b62f8a5a4b099ed9ecb7ab661d833693c872f92f81169eb6d458

    • SHA512

      3229d70bb369d019c1f52f4f53f7fdf7989772222dc460aa5488c0928341f910ed8b5273f89caaaba62f7608c8f4e58ee29667585473e14587a3942a19073602

    • SSDEEP

      1536:ud9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:2dseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks