neconyd | ab4ebe10c455386b14f644379fe6f4e91f73f9c41d247a7dfaee96051f692009 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

ab4ebe10c4...09.exe

windows7-x64

ab4ebe10c4...09.exe

windows10-2004-x64

Sharing

General

Target

ab4ebe10c455386b14f644379fe6f4e91f73f9c41d247a7dfaee96051f692009
Size

64KB
Sample

241206-bme7qsslct
MD5

9e0a955da113d1de1e82afdf2e8464df
SHA1

61b531f015149c0c82aafc96903ae3557e574e39
SHA256

ab4ebe10c455386b14f644379fe6f4e91f73f9c41d247a7dfaee96051f692009
SHA512

95d18bd2e1d650ec2d0eb13cd4ffd9bb291313599510663a1def54b06e1e7074a7a4ec090eb2ccf3e19e262219834bd74405e9be352c426cfbb1d92cfa34f5bf
SSDEEP

768:IMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uA:IbIvYvZEyFKF6N4yS+AQmZcl/5

Score

10^/10

neconyd discovery trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

ab4ebe10c455386b14f644379fe6f4e91f73f9c41d247a7dfaee96051f692009.exe

Resource

win7-20240903-en

neconyd discovery trojan

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

ab4ebe10c455386b14f644379fe6f4e91f73f9c41d247a7dfaee96051f692009.exe

Resource

win10v2004-20241007-en

neconyd discovery trojan

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

- Target
  
  ab4ebe10c455386b14f644379fe6f4e91f73f9c41d247a7dfaee96051f692009
- Size
  
  64KB
- MD5
  
  9e0a955da113d1de1e82afdf2e8464df
- SHA1
  
  61b531f015149c0c82aafc96903ae3557e574e39
- SHA256
  
  ab4ebe10c455386b14f644379fe6f4e91f73f9c41d247a7dfaee96051f692009
- SHA512
  
  95d18bd2e1d650ec2d0eb13cd4ffd9bb291313599510663a1def54b06e1e7074a7a4ec090eb2ccf3e19e262219834bd74405e9be352c426cfbb1d92cfa34f5bf
- SSDEEP
  
  768:IMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uA:IbIvYvZEyFKF6N4yS+AQmZcl/5
Score

10^/10

neconyd discovery trojan
- Neconyd
  Neconyd is a trojan written in C++.
  trojan neconyd
- Neconyd family
  neconyd
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

neconyddiscoverytrojan

behavioral2

neconyddiscoverytrojan

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.