Overview

overview

10

Static

static

10

dbe250885f...8a.exe

windows7-x64

10

dbe250885f...8a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dbe250885f238b504e3737d38447fb01093f93d118c332841b2e8892e964258a

  • Size

    80KB

  • Sample

    250203-gglp8askds

  • MD5

    795f2d2e2962e83c62eaac64a020763f

  • SHA1

    bca9efebd53235dd835c1534a0b53a9f58a6fc6f

  • SHA256

    dbe250885f238b504e3737d38447fb01093f93d118c332841b2e8892e964258a

  • SHA512

    a8c90d2cdcd4f51296dd0d7561b085ea7c776d6a3fa213256d26df6820cacc472fedd976110ce407bc77ce24fe1d42ac922ce46c2a72a906805c42809c1fa34b

  • SSDEEP

    1536:Wd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzB:udseIOMEZEyFjEOFqTiQmOl/5xPvwN

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      dbe250885f238b504e3737d38447fb01093f93d118c332841b2e8892e964258a

    • Size

      80KB

    • MD5

      795f2d2e2962e83c62eaac64a020763f

    • SHA1

      bca9efebd53235dd835c1534a0b53a9f58a6fc6f

    • SHA256

      dbe250885f238b504e3737d38447fb01093f93d118c332841b2e8892e964258a

    • SHA512

      a8c90d2cdcd4f51296dd0d7561b085ea7c776d6a3fa213256d26df6820cacc472fedd976110ce407bc77ce24fe1d42ac922ce46c2a72a906805c42809c1fa34b

    • SSDEEP

      1536:Wd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/52izbR9XwzB:udseIOMEZEyFjEOFqTiQmOl/5xPvwN

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks