Overview

overview

10

Static

static

10

6b9f893b65...0N.exe

windows7-x64

10

6b9f893b65...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6b9f893b651a4c9f9bce4860abcf5210N.exe

  • Size

    92KB

  • Sample

    240821-tbdhwa1bmm

  • MD5

    6b9f893b651a4c9f9bce4860abcf5210

  • SHA1

    2b40dee78eb457c2a6481d6eec8cfa621a7a2135

  • SHA256

    a61c1566c8c60a14329ac3217712afdd022b4677aa9538a5d98fae9f9752de6f

  • SHA512

    d96a0b5d8f9afb0c5af8b49fad2c97ce2f53f2f328d72932622e866a70b7b6f6af748978875c78689f5da1cdc1cc4b013884ec8a8765f2364d3c3ac4448c8247

  • SSDEEP

    1536:zd9dseIOcEE3bIvYvZEyF4EEOF6N4yS+AQmZTl/5:zdseIO/EZEyFjEOFqTiQm5l/5

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      6b9f893b651a4c9f9bce4860abcf5210N.exe

    • Size

      92KB

    • MD5

      6b9f893b651a4c9f9bce4860abcf5210

    • SHA1

      2b40dee78eb457c2a6481d6eec8cfa621a7a2135

    • SHA256

      a61c1566c8c60a14329ac3217712afdd022b4677aa9538a5d98fae9f9752de6f

    • SHA512

      d96a0b5d8f9afb0c5af8b49fad2c97ce2f53f2f328d72932622e866a70b7b6f6af748978875c78689f5da1cdc1cc4b013884ec8a8765f2364d3c3ac4448c8247

    • SSDEEP

      1536:zd9dseIOcEE3bIvYvZEyF4EEOF6N4yS+AQmZTl/5:zdseIO/EZEyFjEOFqTiQm5l/5

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks