Overview

overview

10

Static

static

10

8a7b4a2037...60.exe

windows7-x64

10

8a7b4a2037...60.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a7b4a20378969b2d5589593732ba04b75782156ce45c26ead1aa9a2d1c5f060.exe

  • Size

    71KB

  • Sample

    250113-ncdx5szmby

  • MD5

    b51eedf2b9a9b3799457aec1d5b58e28

  • SHA1

    29c6a50b4616c9004a45a4b01f604b1ab18b9c97

  • SHA256

    8a7b4a20378969b2d5589593732ba04b75782156ce45c26ead1aa9a2d1c5f060

  • SHA512

    eadaca67818d5cfa751bdbf1633bdb4666a70796c27339a7f17425287faf0892a47408eb7abfcbdbf2558e57637fdf40c82ebb246286435c93fd41f76169b864

  • SSDEEP

    1536:fd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbH3:XdseIOMEZEyFjEOFqTiQmQDHIbH3

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      8a7b4a20378969b2d5589593732ba04b75782156ce45c26ead1aa9a2d1c5f060.exe

    • Size

      71KB

    • MD5

      b51eedf2b9a9b3799457aec1d5b58e28

    • SHA1

      29c6a50b4616c9004a45a4b01f604b1ab18b9c97

    • SHA256

      8a7b4a20378969b2d5589593732ba04b75782156ce45c26ead1aa9a2d1c5f060

    • SHA512

      eadaca67818d5cfa751bdbf1633bdb4666a70796c27339a7f17425287faf0892a47408eb7abfcbdbf2558e57637fdf40c82ebb246286435c93fd41f76169b864

    • SSDEEP

      1536:fd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbH3:XdseIOMEZEyFjEOFqTiQmQDHIbH3

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks