Overview

overview

10

Static

static

10

cf8866ac3d...0a.exe

windows7-x64

10

cf8866ac3d...0a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf8866ac3de88b717426947d1ff38e0d05c3d351866f4bb7935476669aa1f80a

  • Size

    64KB

  • Sample

    241230-dzwflawqhp

  • MD5

    df01b9df52d25b93a9e8a294e2f8c765

  • SHA1

    7ea09ab708f67a4d771e146733ce9fcce3fc8c48

  • SHA256

    cf8866ac3de88b717426947d1ff38e0d05c3d351866f4bb7935476669aa1f80a

  • SHA512

    7daaa253d2604aa7d19e5cca4980ae68eb174f7aa279e61e55043591ac5e18c88516bb104c90df1ac11776bb07bcf36bc4639de6b6f0a605e465d94eeb5c5145

  • SSDEEP

    768:eMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uA:ebIvYvZEyFKF6N4yS+AQmZcl/5

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      cf8866ac3de88b717426947d1ff38e0d05c3d351866f4bb7935476669aa1f80a

    • Size

      64KB

    • MD5

      df01b9df52d25b93a9e8a294e2f8c765

    • SHA1

      7ea09ab708f67a4d771e146733ce9fcce3fc8c48

    • SHA256

      cf8866ac3de88b717426947d1ff38e0d05c3d351866f4bb7935476669aa1f80a

    • SHA512

      7daaa253d2604aa7d19e5cca4980ae68eb174f7aa279e61e55043591ac5e18c88516bb104c90df1ac11776bb07bcf36bc4639de6b6f0a605e465d94eeb5c5145

    • SSDEEP

      768:eMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uA:ebIvYvZEyFKF6N4yS+AQmZcl/5

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks