Overview

overview

10

Static

static

10

0fd2a258a3...9a.exe

windows7-x64

10

0fd2a258a3...9a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0fd2a258a3498905a7f0e2a9842d87586794b832f173579d00ca505f1fb0f59a.exe

  • Size

    61KB

  • Sample

    241203-jkrrrawkdt

  • MD5

    56525fd577862dd0a94ed4a7731fa970

  • SHA1

    7f327ac5b52d96a43c258e7e2800f57a011b7c84

  • SHA256

    0fd2a258a3498905a7f0e2a9842d87586794b832f173579d00ca505f1fb0f59a

  • SHA512

    c7bade7acf19702b1c78aaa1f2548be9d023809a8289023a26e3062393e7b9df9aff06990212e9fa1778aa13a0e546d7406ed8a0b931e1edf5ef3ff5583902fe

  • SSDEEP

    1536:sd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZnql/5f:UdseIOMEZEyFjEOFqTiQmFql/5f

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      0fd2a258a3498905a7f0e2a9842d87586794b832f173579d00ca505f1fb0f59a.exe

    • Size

      61KB

    • MD5

      56525fd577862dd0a94ed4a7731fa970

    • SHA1

      7f327ac5b52d96a43c258e7e2800f57a011b7c84

    • SHA256

      0fd2a258a3498905a7f0e2a9842d87586794b832f173579d00ca505f1fb0f59a

    • SHA512

      c7bade7acf19702b1c78aaa1f2548be9d023809a8289023a26e3062393e7b9df9aff06990212e9fa1778aa13a0e546d7406ed8a0b931e1edf5ef3ff5583902fe

    • SSDEEP

      1536:sd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZnql/5f:UdseIOMEZEyFjEOFqTiQmFql/5f

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks