Overview

overview

10

Static

static

10

b308483f9f...29.exe

windows7-x64

10

b308483f9f...29.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b308483f9fed901628a9341f9ac7e1546f44f1643979e2f70224e7e9612a8429

  • Size

    70KB

  • Sample

    250109-hjtpaaslcs

  • MD5

    b483ab5c9018ea96cb70d2b40c4f8d1e

  • SHA1

    5d28d055562b55df9e4d4aa9e87c1a8907598d5d

  • SHA256

    b308483f9fed901628a9341f9ac7e1546f44f1643979e2f70224e7e9612a8429

  • SHA512

    3acd494d5c4264d186ad246fc7e189102b0b7deaaadcbb38556a618d04fe8bd29d1ef0368c97e05c0992a0f83759ca9fe6e7e6ec1f8b380dd1160388acbc1ace

  • SSDEEP

    1536:kd9dseIOcE93bIvYvZEyF4EEOF+N4yS+AQmZsDHNzfE:cdseIOMEZEyFjEOFuTiQm+DHNzfE

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      b308483f9fed901628a9341f9ac7e1546f44f1643979e2f70224e7e9612a8429

    • Size

      70KB

    • MD5

      b483ab5c9018ea96cb70d2b40c4f8d1e

    • SHA1

      5d28d055562b55df9e4d4aa9e87c1a8907598d5d

    • SHA256

      b308483f9fed901628a9341f9ac7e1546f44f1643979e2f70224e7e9612a8429

    • SHA512

      3acd494d5c4264d186ad246fc7e189102b0b7deaaadcbb38556a618d04fe8bd29d1ef0368c97e05c0992a0f83759ca9fe6e7e6ec1f8b380dd1160388acbc1ace

    • SSDEEP

      1536:kd9dseIOcE93bIvYvZEyF4EEOF+N4yS+AQmZsDHNzfE:cdseIOMEZEyFjEOFuTiQm+DHNzfE

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks