Overview

overview

10

Static

static

3

90a3aa5372...fb.exe

windows7-x64

10

90a3aa5372...fb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    90a3aa5372cc5b349a67c66b126d6a2333a86dce0a6ec0c9f691013b210382fb

  • Size

    33KB

  • Sample

    250110-e4yl7avkdq

  • MD5

    72109d4d586848ae060ad7dcc5bd4c3d

  • SHA1

    18a6cae894babf63e11965475f7ae09879dc6bf7

  • SHA256

    90a3aa5372cc5b349a67c66b126d6a2333a86dce0a6ec0c9f691013b210382fb

  • SHA512

    2959a64b07d0156d906f41c492cf2d37c5d433a98e602e005c2c445c5d866e0565676c693132b08360a45fb9ba4362eb479597fe08872b6b7e213c6dcf3451be

  • SSDEEP

    768:lfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7D:lfVRztyHo8QNHTk0qE5fslvN/956q

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      90a3aa5372cc5b349a67c66b126d6a2333a86dce0a6ec0c9f691013b210382fb

    • Size

      33KB

    • MD5

      72109d4d586848ae060ad7dcc5bd4c3d

    • SHA1

      18a6cae894babf63e11965475f7ae09879dc6bf7

    • SHA256

      90a3aa5372cc5b349a67c66b126d6a2333a86dce0a6ec0c9f691013b210382fb

    • SHA512

      2959a64b07d0156d906f41c492cf2d37c5d433a98e602e005c2c445c5d866e0565676c693132b08360a45fb9ba4362eb479597fe08872b6b7e213c6dcf3451be

    • SSDEEP

      768:lfVhP/4kt3+9IV6Y90ksQ1oWHT0hh0vy9S5fsYGbTmoN/yE56hlSQ7D:lfVRztyHo8QNHTk0qE5fslvN/956q

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks