Overview

overview

10

Static

static

10

fad56a85fe...d4.exe

windows7-x64

10

fad56a85fe...d4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fad56a85fec904b987209ea41c906099189f48e0bfdd40b99423ae3d867b13d4.exe

  • Size

    61KB

  • Sample

    250124-brr24atrer

  • MD5

    aef12e5b9612fb334ce7510c220fdd29

  • SHA1

    8e0ca52f347b5c1096b2f66e643ddde271975618

  • SHA256

    fad56a85fec904b987209ea41c906099189f48e0bfdd40b99423ae3d867b13d4

  • SHA512

    5884d4e2c9e4f6047d8606cd38ba75dd61a7098612e24830bd4872422853093a6215f053dbc7e19801ef86abf18ec31becaefaa5d52937978d7285d180958a6e

  • SSDEEP

    1536:bd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ1l/5t:rdseIOMEZEyFjEOFqTiQmXl/5t

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      fad56a85fec904b987209ea41c906099189f48e0bfdd40b99423ae3d867b13d4.exe

    • Size

      61KB

    • MD5

      aef12e5b9612fb334ce7510c220fdd29

    • SHA1

      8e0ca52f347b5c1096b2f66e643ddde271975618

    • SHA256

      fad56a85fec904b987209ea41c906099189f48e0bfdd40b99423ae3d867b13d4

    • SHA512

      5884d4e2c9e4f6047d8606cd38ba75dd61a7098612e24830bd4872422853093a6215f053dbc7e19801ef86abf18ec31becaefaa5d52937978d7285d180958a6e

    • SSDEEP

      1536:bd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ1l/5t:rdseIOMEZEyFjEOFqTiQmXl/5t

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks