Overview

overview

10

Static

static

10

fb1300d325...cN.exe

windows7-x64

10

fb1300d325...cN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb1300d32582c6cfdf0abd83d5ec78d8672c87c68049f94bd85899af7732e83cN.exe

  • Size

    89KB

  • Sample

    241205-xrfvqaxmcs

  • MD5

    39d29a04536e738ff9d9a15b87079060

  • SHA1

    1e4f6694f61182f81d9ceefcb516ae25cffb4ecb

  • SHA256

    fb1300d32582c6cfdf0abd83d5ec78d8672c87c68049f94bd85899af7732e83c

  • SHA512

    7618528c6184d92a1d4c4ea824ce5c466bb183f448b347e9e7e743619f5f277707e33c94dbacd1f6399cb2e6ebb60a2c8607e96b9a301af4bdc9de6b50e270d5

  • SSDEEP

    768:rMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA1:rbIvYvZEyFKF6N4yS+AQmZTl/5d

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      fb1300d32582c6cfdf0abd83d5ec78d8672c87c68049f94bd85899af7732e83cN.exe

    • Size

      89KB

    • MD5

      39d29a04536e738ff9d9a15b87079060

    • SHA1

      1e4f6694f61182f81d9ceefcb516ae25cffb4ecb

    • SHA256

      fb1300d32582c6cfdf0abd83d5ec78d8672c87c68049f94bd85899af7732e83c

    • SHA512

      7618528c6184d92a1d4c4ea824ce5c466bb183f448b347e9e7e743619f5f277707e33c94dbacd1f6399cb2e6ebb60a2c8607e96b9a301af4bdc9de6b50e270d5

    • SSDEEP

      768:rMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA1:rbIvYvZEyFKF6N4yS+AQmZTl/5d

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks