Overview

overview

10

Static

static

10

8168c95553...cf.exe

windows7-x64

10

8168c95553...cf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8168c9555358ef6882fe84c29017c9bd32921f80bcda756b90f1994291c633cf

  • Size

    61KB

  • Sample

    250203-blt99svkgw

  • MD5

    d95ce442176fb8bb198dd1be4850d7c8

  • SHA1

    b739fdff2b4a1c04c8dddef6d6ae010f74ec57be

  • SHA256

    8168c9555358ef6882fe84c29017c9bd32921f80bcda756b90f1994291c633cf

  • SHA512

    6815e5f6d516fab8749483b19551ba628bada52add3c46da8ce79423e3398ad5bdc3a4731aa50237d3ceaefee7b1d1162fff06d1c4b2138b7ac145f2e0e6ffa1

  • SSDEEP

    1536:Gd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:+dseIOMEZEyFjEOFqTiQmFl/5

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      8168c9555358ef6882fe84c29017c9bd32921f80bcda756b90f1994291c633cf

    • Size

      61KB

    • MD5

      d95ce442176fb8bb198dd1be4850d7c8

    • SHA1

      b739fdff2b4a1c04c8dddef6d6ae010f74ec57be

    • SHA256

      8168c9555358ef6882fe84c29017c9bd32921f80bcda756b90f1994291c633cf

    • SHA512

      6815e5f6d516fab8749483b19551ba628bada52add3c46da8ce79423e3398ad5bdc3a4731aa50237d3ceaefee7b1d1162fff06d1c4b2138b7ac145f2e0e6ffa1

    • SSDEEP

      1536:Gd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:+dseIOMEZEyFjEOFqTiQmFl/5

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks