Overview

overview

10

Static

static

10

591ab074dd...fN.exe

windows7-x64

10

591ab074dd...fN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    591ab074dda6288321d63e5326d495b95a45c03e898dc9d218741519ad9785ffN.exe

  • Size

    80KB

  • Sample

    241226-lprzesskhw

  • MD5

    b17bb5698c11517a8b80cfbd8b9adc20

  • SHA1

    94cac9fc306a82d8de3b8ca5391f021e5dfea5b2

  • SHA256

    591ab074dda6288321d63e5326d495b95a45c03e898dc9d218741519ad9785ff

  • SHA512

    683d69164fb2b54be885c8cdcc5a184eee749e9dd4d82ad8ff9e8b78e3680d6ece62cd91a81dbc881a8116cfdcb222f48aa576388ef04b41027527571dae63f8

  • SSDEEP

    1536:pd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzB:pdseIOMEZEyFjEOFqTiQmOl/5xPvwN

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      591ab074dda6288321d63e5326d495b95a45c03e898dc9d218741519ad9785ffN.exe

    • Size

      80KB

    • MD5

      b17bb5698c11517a8b80cfbd8b9adc20

    • SHA1

      94cac9fc306a82d8de3b8ca5391f021e5dfea5b2

    • SHA256

      591ab074dda6288321d63e5326d495b95a45c03e898dc9d218741519ad9785ff

    • SHA512

      683d69164fb2b54be885c8cdcc5a184eee749e9dd4d82ad8ff9e8b78e3680d6ece62cd91a81dbc881a8116cfdcb222f48aa576388ef04b41027527571dae63f8

    • SSDEEP

      1536:pd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzB:pdseIOMEZEyFjEOFqTiQmOl/5xPvwN

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks