Overview

overview

10

Static

static

10

fb7d8dab0c...fe.exe

windows7-x64

10

fb7d8dab0c...fe.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb7d8dab0cc81f04533ac27f173c24971d79cb57659ea96f881d1e6c7a8530fe.exe

  • Size

    80KB

  • Sample

    241230-shaj5azrfz

  • MD5

    b1f8acd97175c71200908ec76ccf7906

  • SHA1

    6c276b3aa94849880068b9f1c25490cc4e9e7152

  • SHA256

    fb7d8dab0cc81f04533ac27f173c24971d79cb57659ea96f881d1e6c7a8530fe

  • SHA512

    489d8d4f949677a5784035d297561d883c7260492247504c107918847b49d02fdea5cf1b553dabb7ba163d1108fb4c93e12253d03ca58582268308ada1dc4c9c

  • SSDEEP

    768:tfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAO:tfbIvYvZEyFKF6N4yS+AQmZTl/5m

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      fb7d8dab0cc81f04533ac27f173c24971d79cb57659ea96f881d1e6c7a8530fe.exe

    • Size

      80KB

    • MD5

      b1f8acd97175c71200908ec76ccf7906

    • SHA1

      6c276b3aa94849880068b9f1c25490cc4e9e7152

    • SHA256

      fb7d8dab0cc81f04533ac27f173c24971d79cb57659ea96f881d1e6c7a8530fe

    • SHA512

      489d8d4f949677a5784035d297561d883c7260492247504c107918847b49d02fdea5cf1b553dabb7ba163d1108fb4c93e12253d03ca58582268308ada1dc4c9c

    • SSDEEP

      768:tfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAO:tfbIvYvZEyFKF6N4yS+AQmZTl/5m

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks