Overview

overview

10

Static

static

10

0e7143ad7a...d0.exe

windows7-x64

10

0e7143ad7a...d0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0e7143ad7a887add41c3451bd07bb258059b12ee24b00fdb5abc6deb513106d0.exe

  • Size

    72KB

  • Sample

    241211-r58vrsxjew

  • MD5

    875b37b1081e4e898456c8cdb9d500fe

  • SHA1

    388d7d3a4dba9115741a5f107fcc48471508573f

  • SHA256

    0e7143ad7a887add41c3451bd07bb258059b12ee24b00fdb5abc6deb513106d0

  • SHA512

    496489eee7710b0adfedd489d90cc3157fa5001bc9d3c71f7283bdeb11919e8e2f1bc2fc1c312af39f449375bcdd8418475b1c4e6dc190a4cc753e76ed25b78a

  • SSDEEP

    1536:Bd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211X:xdseIOMEZEyFjEOFqTiQm5l/5211X

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      0e7143ad7a887add41c3451bd07bb258059b12ee24b00fdb5abc6deb513106d0.exe

    • Size

      72KB

    • MD5

      875b37b1081e4e898456c8cdb9d500fe

    • SHA1

      388d7d3a4dba9115741a5f107fcc48471508573f

    • SHA256

      0e7143ad7a887add41c3451bd07bb258059b12ee24b00fdb5abc6deb513106d0

    • SHA512

      496489eee7710b0adfedd489d90cc3157fa5001bc9d3c71f7283bdeb11919e8e2f1bc2fc1c312af39f449375bcdd8418475b1c4e6dc190a4cc753e76ed25b78a

    • SSDEEP

      1536:Bd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211X:xdseIOMEZEyFjEOFqTiQm5l/5211X

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks