Overview

overview

10

Static

static

10

8a6a14b286...20.exe

windows7-x64

10

8a6a14b286...20.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a6a14b28675f2c7c498fa84d1bdf4cb2d5d564f5d332b0b28c8112cadb53820.exe

  • Size

    90KB

  • Sample

    241203-d61znatpgk

  • MD5

    b9186d917a9236ca7314e0300bb263ba

  • SHA1

    6ea4d34c04140e23a0764ec41e32a8697fa26f79

  • SHA256

    8a6a14b28675f2c7c498fa84d1bdf4cb2d5d564f5d332b0b28c8112cadb53820

  • SHA512

    0ab206bd7593e0e3b39aea1ab7e4c80c0aec21d8ad5074ceaabcf90d794c6807e0792424c91144149fda52d8e85b80e29ae14d660c3d989a0b935b457b788669

  • SSDEEP

    768:+MEIvFGvZEr8LFK0ic46N4zeSdPAHwmZGp6JXXlaa5uAO:+bIvYvZEyFKF6N4aS5AQmZTl/5G

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      8a6a14b28675f2c7c498fa84d1bdf4cb2d5d564f5d332b0b28c8112cadb53820.exe

    • Size

      90KB

    • MD5

      b9186d917a9236ca7314e0300bb263ba

    • SHA1

      6ea4d34c04140e23a0764ec41e32a8697fa26f79

    • SHA256

      8a6a14b28675f2c7c498fa84d1bdf4cb2d5d564f5d332b0b28c8112cadb53820

    • SHA512

      0ab206bd7593e0e3b39aea1ab7e4c80c0aec21d8ad5074ceaabcf90d794c6807e0792424c91144149fda52d8e85b80e29ae14d660c3d989a0b935b457b788669

    • SSDEEP

      768:+MEIvFGvZEr8LFK0ic46N4zeSdPAHwmZGp6JXXlaa5uAO:+bIvYvZEyFKF6N4aS5AQmZTl/5G

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks