Overview

overview

10

Static

static

10

f0d10b649c...be.exe

windows7-x64

10

f0d10b649c...be.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f0d10b649cd5b1eeee89753aed209081a0d07bfa838d69b012d511fb660188be.exe

  • Size

    65KB

  • Sample

    250124-fgg7cszrdz

  • MD5

    a92d13c049690b507dec08c60b31b63c

  • SHA1

    3cfd1845b72a3f718f822c738f4f6d1f7d1a5e15

  • SHA256

    f0d10b649cd5b1eeee89753aed209081a0d07bfa838d69b012d511fb660188be

  • SHA512

    78028dd07b3cd83a7a53b14036afc544e377c625ea3cf1ee39e74101829c3c4d89a9a31ed1787fe975fda15f8f80cb85e52004558fa2144ffa0e0e24d8e793b9

  • SSDEEP

    1536:Gd9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/HzP:+dseIO+EZEyFjEOFqTiQmRHzP

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      f0d10b649cd5b1eeee89753aed209081a0d07bfa838d69b012d511fb660188be.exe

    • Size

      65KB

    • MD5

      a92d13c049690b507dec08c60b31b63c

    • SHA1

      3cfd1845b72a3f718f822c738f4f6d1f7d1a5e15

    • SHA256

      f0d10b649cd5b1eeee89753aed209081a0d07bfa838d69b012d511fb660188be

    • SHA512

      78028dd07b3cd83a7a53b14036afc544e377c625ea3cf1ee39e74101829c3c4d89a9a31ed1787fe975fda15f8f80cb85e52004558fa2144ffa0e0e24d8e793b9

    • SSDEEP

      1536:Gd9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZ/HzP:+dseIO+EZEyFjEOFqTiQmRHzP

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks