Overview

overview

10

Static

static

10

5f3d5f3ac4...5N.exe

windows7-x64

10

5f3d5f3ac4...5N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5f3d5f3ac404b493c79aaf8f48f259c07624c4890009c38943649521927c8ce5N.exe

  • Size

    76KB

  • Sample

    250122-tfn56stpev

  • MD5

    a0272e6696253c44389e1c479d1414d0

  • SHA1

    776216cb2cb426a382eb1f60fd7327a586440260

  • SHA256

    5f3d5f3ac404b493c79aaf8f48f259c07624c4890009c38943649521927c8ce5

  • SHA512

    fd20b0d38d67be144dfa5cc618ed8f3b2c6a7c7fce486d3079fd4ff70ba7a45e01e60488a0b868f52c38b3e2ab5954906329b0e2c7cd7e673924588356bf9ecf

  • SSDEEP

    1536:vd9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w11:HdseIOMEZEyFjEOFqaiQm5l/5w11

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      5f3d5f3ac404b493c79aaf8f48f259c07624c4890009c38943649521927c8ce5N.exe

    • Size

      76KB

    • MD5

      a0272e6696253c44389e1c479d1414d0

    • SHA1

      776216cb2cb426a382eb1f60fd7327a586440260

    • SHA256

      5f3d5f3ac404b493c79aaf8f48f259c07624c4890009c38943649521927c8ce5

    • SHA512

      fd20b0d38d67be144dfa5cc618ed8f3b2c6a7c7fce486d3079fd4ff70ba7a45e01e60488a0b868f52c38b3e2ab5954906329b0e2c7cd7e673924588356bf9ecf

    • SSDEEP

      1536:vd9dseIOcE93bIvYvZEyF4EEOF6N4XS+AQmZTl/5w11:HdseIOMEZEyFjEOFqaiQm5l/5w11

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks