Overview

overview

10

Static

static

3

6a1b89f2ae...1b.exe

windows7-x64

10

6a1b89f2ae...1b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6a1b89f2ae611c917de7850eec73430b96531bf7f8b0767b73f1d2407bcea61b.exe

  • Size

    33KB

  • Sample

    241205-tvha6sykhm

  • MD5

    69f977832f61c475cc0494783f506520

  • SHA1

    ec0855e68d06839eb9710017cc5cfd70d7ee2977

  • SHA256

    6a1b89f2ae611c917de7850eec73430b96531bf7f8b0767b73f1d2407bcea61b

  • SHA512

    cad3d6215a1206c4d980ceb879e2e63403741ee9426939dd1d75339acb7683e6d41bb64fad8e277f61fd704de0e29172ab67b9da45bbfdcc7f638230038b9aaa

  • SSDEEP

    768:HfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7D7:HfVRztyHo8QNHTk0qE5fslvN/956qA

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      6a1b89f2ae611c917de7850eec73430b96531bf7f8b0767b73f1d2407bcea61b.exe

    • Size

      33KB

    • MD5

      69f977832f61c475cc0494783f506520

    • SHA1

      ec0855e68d06839eb9710017cc5cfd70d7ee2977

    • SHA256

      6a1b89f2ae611c917de7850eec73430b96531bf7f8b0767b73f1d2407bcea61b

    • SHA512

      cad3d6215a1206c4d980ceb879e2e63403741ee9426939dd1d75339acb7683e6d41bb64fad8e277f61fd704de0e29172ab67b9da45bbfdcc7f638230038b9aaa

    • SSDEEP

      768:HfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7D7:HfVRztyHo8QNHTk0qE5fslvN/956qA

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks