Overview

overview

10

Static

static

10

ef66e7667b...b6.exe

windows7-x64

10

ef66e7667b...b6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef66e7667b1b2337e1b95b71989666eab22f8712c98166400f99248f8cbdf4b6.exe

  • Size

    80KB

  • Sample

    241206-nn32eavqbz

  • MD5

    b465b4f55a678a8be063f1448983dc85

  • SHA1

    4ce3865726505163edbcf5e5a952be0e33d54c03

  • SHA256

    ef66e7667b1b2337e1b95b71989666eab22f8712c98166400f99248f8cbdf4b6

  • SHA512

    0c3eedad30161a3b4015342be0d405ff24ce3feb2d71afc3a1011a874d455049db2ba027ea4b6b7f30e8008e3bdcde78ae1a1ab5d904fa2a307aff544bafd8d0

  • SSDEEP

    1536:Gd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzJ:+dseIOMEZEyFjEOFqTiQmOl/5xPvwV

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      ef66e7667b1b2337e1b95b71989666eab22f8712c98166400f99248f8cbdf4b6.exe

    • Size

      80KB

    • MD5

      b465b4f55a678a8be063f1448983dc85

    • SHA1

      4ce3865726505163edbcf5e5a952be0e33d54c03

    • SHA256

      ef66e7667b1b2337e1b95b71989666eab22f8712c98166400f99248f8cbdf4b6

    • SHA512

      0c3eedad30161a3b4015342be0d405ff24ce3feb2d71afc3a1011a874d455049db2ba027ea4b6b7f30e8008e3bdcde78ae1a1ab5d904fa2a307aff544bafd8d0

    • SSDEEP

      1536:Gd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzJ:+dseIOMEZEyFjEOFqTiQmOl/5xPvwV

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks