Overview

overview

10

Static

static

3

65d5017e05...c3.exe

windows7-x64

10

65d5017e05...c3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    65d5017e053b23fbcfa34607137019ab58e488c4753f51a905d402fce82fdcc3.exe

  • Size

    33KB

  • Sample

    250102-ks3dwstrc1

  • MD5

    b4fb7aa55093dabeb9843970eb9914d1

  • SHA1

    bb1aab0f590f8771b286ff584da3ad6000a7fdf1

  • SHA256

    65d5017e053b23fbcfa34607137019ab58e488c4753f51a905d402fce82fdcc3

  • SHA512

    1bf4345bd11957f2a66000b8a5253970ab2cc275d83d83ab035a56da6bad87b1607af3d1d29af8a2606ea1da9247478f2913bf89ea009c97ba467d563a0f55e1

  • SSDEEP

    768:/fVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7D/:/fVRztyHo8QNHTk0qE5fslvN/956qo

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      65d5017e053b23fbcfa34607137019ab58e488c4753f51a905d402fce82fdcc3.exe

    • Size

      33KB

    • MD5

      b4fb7aa55093dabeb9843970eb9914d1

    • SHA1

      bb1aab0f590f8771b286ff584da3ad6000a7fdf1

    • SHA256

      65d5017e053b23fbcfa34607137019ab58e488c4753f51a905d402fce82fdcc3

    • SHA512

      1bf4345bd11957f2a66000b8a5253970ab2cc275d83d83ab035a56da6bad87b1607af3d1d29af8a2606ea1da9247478f2913bf89ea009c97ba467d563a0f55e1

    • SSDEEP

      768:/fVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7D/:/fVRztyHo8QNHTk0qE5fslvN/956qo

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks