Overview

overview

10

Static

static

10

d902ab87b3...ab.exe

windows7-x64

10

d902ab87b3...ab.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d902ab87b358172666febc31d04f30cc4194f4bc1f6fdd1a40dec3bd52f644ab

  • Size

    80KB

  • Sample

    241228-dtv8msvqfp

  • MD5

    1a3aad5ce62edaf7923bab44dd9d8727

  • SHA1

    03a9efa9b7f04d91b9282d553c98ee1735863ce6

  • SHA256

    d902ab87b358172666febc31d04f30cc4194f4bc1f6fdd1a40dec3bd52f644ab

  • SHA512

    c662c0ef129d7ce7b2dfb7ef62529a494ef6a7205fb346477076a4447e38c7b15cf2769a15bccf0602912f0030c656352c5b3a7aa1715b603be89d9ce6d5114c

  • SSDEEP

    1536:jd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzJ:DdseIOMEZEyFjEOFqTiQmOl/5xPvwV

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      d902ab87b358172666febc31d04f30cc4194f4bc1f6fdd1a40dec3bd52f644ab

    • Size

      80KB

    • MD5

      1a3aad5ce62edaf7923bab44dd9d8727

    • SHA1

      03a9efa9b7f04d91b9282d553c98ee1735863ce6

    • SHA256

      d902ab87b358172666febc31d04f30cc4194f4bc1f6fdd1a40dec3bd52f644ab

    • SHA512

      c662c0ef129d7ce7b2dfb7ef62529a494ef6a7205fb346477076a4447e38c7b15cf2769a15bccf0602912f0030c656352c5b3a7aa1715b603be89d9ce6d5114c

    • SSDEEP

      1536:jd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzJ:DdseIOMEZEyFjEOFqTiQmOl/5xPvwV

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks