neconyd | 93951778edc3ac3bfee0daa48d23b56346f7cabf53de8d29dd879a35823de294 | Triage

Sharing

General

Target

93951778edc3ac3bfee0daa48d23b56346f7cabf53de8d29dd879a35823de294.exe
Size

80KB
Sample

250216-k15tzs1me1
MD5

9f079e2ef9b27ffb6a26cf84d06d981c
SHA1

8908d224c4abee67c57bbfbfd5b1919e6c785573
SHA256

93951778edc3ac3bfee0daa48d23b56346f7cabf53de8d29dd879a35823de294
SHA512

86c994fb23d32a0a33a9c999f54a4c6e411e5485b4d84d8fc80c10e48773ba17895cbca6a8cf8b2299338afb8e86fd32f2aeaf161fee87cc90b9b68336ed13d9
SSDEEP

768:qfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAa:qfbIvYvZEyFKF6N4yS+AQmZTl/5C

Score

10^/10

neconyd discovery trojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

- Target
  
  93951778edc3ac3bfee0daa48d23b56346f7cabf53de8d29dd879a35823de294.exe
- Size
  
  80KB
- MD5
  
  9f079e2ef9b27ffb6a26cf84d06d981c
- SHA1
  
  8908d224c4abee67c57bbfbfd5b1919e6c785573
- SHA256
  
  93951778edc3ac3bfee0daa48d23b56346f7cabf53de8d29dd879a35823de294
- SHA512
  
  86c994fb23d32a0a33a9c999f54a4c6e411e5485b4d84d8fc80c10e48773ba17895cbca6a8cf8b2299338afb8e86fd32f2aeaf161fee87cc90b9b68336ed13d9
- SSDEEP
  
  768:qfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAa:qfbIvYvZEyFKF6N4yS+AQmZTl/5C
Score

10^/10

neconyd discovery trojan
- Neconyd
  Neconyd is a trojan written in C++.
  trojan neconyd
- Neconyd family
  neconyd
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

neconyddiscoverytrojan

behavioral2

neconyddiscoverytrojan