Overview

overview

10

Static

static

10

b21e8df927...bN.exe

windows7-x64

10

b21e8df927...bN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b21e8df9279fc8634113987252f62ff0235306b01931c99767140b8ae8a7f01bN.exe

  • Size

    80KB

  • Sample

    250122-wrvhfaykgt

  • MD5

    9bc80822b028fff58ee08ec2ea934270

  • SHA1

    f9bd989066a859ecf53dc2347b892e18691564c2

  • SHA256

    b21e8df9279fc8634113987252f62ff0235306b01931c99767140b8ae8a7f01b

  • SHA512

    d6ae05288d4721460a4676126dc55548427cf95071a6412ce767985b61ce429ae3d1780b46063f6853c81de905ef03c573d0d65775c13a8029072822a850fb08

  • SSDEEP

    1536:ud9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzJ:2dseIOMEZEyFjEOFqTiQmOl/5xPvwV

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      b21e8df9279fc8634113987252f62ff0235306b01931c99767140b8ae8a7f01bN.exe

    • Size

      80KB

    • MD5

      9bc80822b028fff58ee08ec2ea934270

    • SHA1

      f9bd989066a859ecf53dc2347b892e18691564c2

    • SHA256

      b21e8df9279fc8634113987252f62ff0235306b01931c99767140b8ae8a7f01b

    • SHA512

      d6ae05288d4721460a4676126dc55548427cf95071a6412ce767985b61ce429ae3d1780b46063f6853c81de905ef03c573d0d65775c13a8029072822a850fb08

    • SSDEEP

      1536:ud9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzJ:2dseIOMEZEyFjEOFqTiQmOl/5xPvwV

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks