Overview

overview

10

Static

static

10

5f8b5850e4...53.exe

windows7-x64

10

5f8b5850e4...53.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5f8b5850e4aa0aebb27a8bb913bf026f4b5fb0e4b1ed4e3ee7ea9366df3aa353

  • Size

    96KB

  • Sample

    240610-pzadxavhrc

  • MD5

    9cddb797c4b59f2034c2b33911128a23

  • SHA1

    b245781d2ab0a9f9a5f28f3c005f7fcc0e5bf8ca

  • SHA256

    5f8b5850e4aa0aebb27a8bb913bf026f4b5fb0e4b1ed4e3ee7ea9366df3aa353

  • SHA512

    91ecdc26af8b0c84026e7f6f85e25c8f4b43eb86514e3a43657a81b0ab5b5ed66d83d72ae808e191efa8d06f8d1c77df65c3da522d42efeae7dfa261b6bb1a9a

  • SSDEEP

    1536:JnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:JGs8cd8eXlYairZYqMddH13L

Score
10/10
neconydtrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      5f8b5850e4aa0aebb27a8bb913bf026f4b5fb0e4b1ed4e3ee7ea9366df3aa353

    • Size

      96KB

    • MD5

      9cddb797c4b59f2034c2b33911128a23

    • SHA1

      b245781d2ab0a9f9a5f28f3c005f7fcc0e5bf8ca

    • SHA256

      5f8b5850e4aa0aebb27a8bb913bf026f4b5fb0e4b1ed4e3ee7ea9366df3aa353

    • SHA512

      91ecdc26af8b0c84026e7f6f85e25c8f4b43eb86514e3a43657a81b0ab5b5ed66d83d72ae808e191efa8d06f8d1c77df65c3da522d42efeae7dfa261b6bb1a9a

    • SSDEEP

      1536:JnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:JGs8cd8eXlYairZYqMddH13L

    Score
    10/10
    neconydtrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Detects executables built or packed with MPress PE compressor

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks