Overview

overview

10

Static

static

10

8718ffa486...88.exe

windows7-x64

10

8718ffa486...88.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8718ffa486339a42ac3aff0020c6c3f0574f0ca75b627016402a9a3d7bd1c488.exe

  • Size

    65KB

  • Sample

    250123-12exysvrax

  • MD5

    604765030c1e27ffb16c2845b8ecbffd

  • SHA1

    3d627af1c443c50ee1fc3bcdc4f583b8912b1820

  • SHA256

    8718ffa486339a42ac3aff0020c6c3f0574f0ca75b627016402a9a3d7bd1c488

  • SHA512

    80bb3e2b412f202f10a185fc0321ea6413d9153194387aca2d402b0af028c6069382d8e07ae2888b4f721e6812e0c255181c9208c2933b5202f44d17c12dc955

  • SSDEEP

    1536:Bd9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/HzV:xdseIO+EZEyFjEOFqTiQmRHzV

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      8718ffa486339a42ac3aff0020c6c3f0574f0ca75b627016402a9a3d7bd1c488.exe

    • Size

      65KB

    • MD5

      604765030c1e27ffb16c2845b8ecbffd

    • SHA1

      3d627af1c443c50ee1fc3bcdc4f583b8912b1820

    • SHA256

      8718ffa486339a42ac3aff0020c6c3f0574f0ca75b627016402a9a3d7bd1c488

    • SHA512

      80bb3e2b412f202f10a185fc0321ea6413d9153194387aca2d402b0af028c6069382d8e07ae2888b4f721e6812e0c255181c9208c2933b5202f44d17c12dc955

    • SSDEEP

      1536:Bd9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/HzV:xdseIO+EZEyFjEOFqTiQmRHzV

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks