Overview

overview

10

Static

static

10

cb1e09e30b...5c.exe

windows7-x64

10

cb1e09e30b...5c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb1e09e30bb7273880cbcc9927e5d02b4f4fe6e25d0ed8dec47df6a78c70945c.exe

  • Size

    72KB

  • Sample

    250122-bwwwva1qhr

  • MD5

    87d057b93a2301e8de8bbb1a495e9b08

  • SHA1

    bdf58c03ca185b5821f08509a30d496e88e0acf0

  • SHA256

    cb1e09e30bb7273880cbcc9927e5d02b4f4fe6e25d0ed8dec47df6a78c70945c

  • SHA512

    69d0106842aa4c88abfa8d4da87214ba09527446a493d431b2f690a5a1f6fb5671ffffa28cf25dd84dc206001b5d8cb9b9f0f79bf637e5f5065b18f83cc7bdb6

  • SSDEEP

    1536:hd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211v:RdseIOMEZEyFjEOFqTiQm5l/5211v

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      cb1e09e30bb7273880cbcc9927e5d02b4f4fe6e25d0ed8dec47df6a78c70945c.exe

    • Size

      72KB

    • MD5

      87d057b93a2301e8de8bbb1a495e9b08

    • SHA1

      bdf58c03ca185b5821f08509a30d496e88e0acf0

    • SHA256

      cb1e09e30bb7273880cbcc9927e5d02b4f4fe6e25d0ed8dec47df6a78c70945c

    • SHA512

      69d0106842aa4c88abfa8d4da87214ba09527446a493d431b2f690a5a1f6fb5671ffffa28cf25dd84dc206001b5d8cb9b9f0f79bf637e5f5065b18f83cc7bdb6

    • SSDEEP

      1536:hd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211v:RdseIOMEZEyFjEOFqTiQm5l/5211v

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks