Overview

overview

10

Static

static

3

NEAS.dd977...b0.exe

windows7-x64

10

NEAS.dd977...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.dd9779b5c794c999c64e0b4dd1af04b0.exe

  • Size

    128KB

  • Sample

    231022-v28mdabf23

  • MD5

    dd9779b5c794c999c64e0b4dd1af04b0

  • SHA1

    77e564649f5b6912f412a471e3b48d4d8dbabcda

  • SHA256

    ec9155947db37b72246ddf8c524af7af4a11da307ecf9907669d34342809aa4e

  • SHA512

    d902adec6f3297fac4f9cf6ff75d98a2a242a01d75bb3cbc7867888a91adce1e2482f169567cf3330b123ac00bf4d4e731545feb925602d2bae73475a1e4fd41

  • SSDEEP

    1536:/DfDbhERTatPLTLLbC+8BMNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabau:riRTe3n8BMAW6J6f1tqF6dngNmaZrN

Score
10/10
neconydtrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      NEAS.dd9779b5c794c999c64e0b4dd1af04b0.exe

    • Size

      128KB

    • MD5

      dd9779b5c794c999c64e0b4dd1af04b0

    • SHA1

      77e564649f5b6912f412a471e3b48d4d8dbabcda

    • SHA256

      ec9155947db37b72246ddf8c524af7af4a11da307ecf9907669d34342809aa4e

    • SHA512

      d902adec6f3297fac4f9cf6ff75d98a2a242a01d75bb3cbc7867888a91adce1e2482f169567cf3330b123ac00bf4d4e731545feb925602d2bae73475a1e4fd41

    • SSDEEP

      1536:/DfDbhERTatPLTLLbC+8BMNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabau:riRTe3n8BMAW6J6f1tqF6dngNmaZrN

    Score
    10/10
    neconydtrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks