Overview

overview

10

Static

static

10

ea3b8f85dd...4N.exe

windows7-x64

10

ea3b8f85dd...4N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea3b8f85dd3a2aa85e15eba56007459e6ee7a325203f39e0268423f01d439764N.exe

  • Size

    72KB

  • Sample

    250116-d9w5wa1qal

  • MD5

    ae09864e7f46e46b6380b9515c0f9f70

  • SHA1

    16e6cf4f57e6d14fb7ede71ddf72ad54cd960991

  • SHA256

    ea3b8f85dd3a2aa85e15eba56007459e6ee7a325203f39e0268423f01d439764

  • SHA512

    3c1e371d28adf0a892f061364b1d7f1189eb21900b5fa7d5007df3effe3762878a45e4507664879838161464f4c5dff2c17fdb49f049af43cc738e8a77a9f065

  • SSDEEP

    1536:Pd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211P:ndseIOMEZEyFjEOFqTiQm5l/5211P

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      ea3b8f85dd3a2aa85e15eba56007459e6ee7a325203f39e0268423f01d439764N.exe

    • Size

      72KB

    • MD5

      ae09864e7f46e46b6380b9515c0f9f70

    • SHA1

      16e6cf4f57e6d14fb7ede71ddf72ad54cd960991

    • SHA256

      ea3b8f85dd3a2aa85e15eba56007459e6ee7a325203f39e0268423f01d439764

    • SHA512

      3c1e371d28adf0a892f061364b1d7f1189eb21900b5fa7d5007df3effe3762878a45e4507664879838161464f4c5dff2c17fdb49f049af43cc738e8a77a9f065

    • SSDEEP

      1536:Pd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211P:ndseIOMEZEyFjEOFqTiQm5l/5211P

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks