Overview

overview

10

Static

static

10

13e23f06bb...99.exe

windows7-x64

10

13e23f06bb...99.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    13e23f06bb6a12636bb53927af11e0a6b869dbb8445e8b1ce4a24394c1ac9099

  • Size

    80KB

  • Sample

    250105-y3dp6svmfx

  • MD5

    4d0883b8168f0bf86222e8b6219c64db

  • SHA1

    75bad7d8fcff49d6fb97133cfe806a6fd884f7e8

  • SHA256

    13e23f06bb6a12636bb53927af11e0a6b869dbb8445e8b1ce4a24394c1ac9099

  • SHA512

    f9c77bd93b2bf9621ebc36d50ec1838b909159280902672952be4a8d5b45c995cf85e7a14cf11d7a71dffe504f3d3359aa3c2c0067705e35a7e2927c9f7036ea

  • SSDEEP

    768:IfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAO:IfbIvYvZEyFKF6N4yS+AQmZTl/5m

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      13e23f06bb6a12636bb53927af11e0a6b869dbb8445e8b1ce4a24394c1ac9099

    • Size

      80KB

    • MD5

      4d0883b8168f0bf86222e8b6219c64db

    • SHA1

      75bad7d8fcff49d6fb97133cfe806a6fd884f7e8

    • SHA256

      13e23f06bb6a12636bb53927af11e0a6b869dbb8445e8b1ce4a24394c1ac9099

    • SHA512

      f9c77bd93b2bf9621ebc36d50ec1838b909159280902672952be4a8d5b45c995cf85e7a14cf11d7a71dffe504f3d3359aa3c2c0067705e35a7e2927c9f7036ea

    • SSDEEP

      768:IfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAO:IfbIvYvZEyFKF6N4yS+AQmZTl/5m

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks