Overview

overview

10

Static

static

10

cc50812272...d9.exe

windows7-x64

10

cc50812272...d9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cc50812272f08a06b7f5b9c625e8b235abeedf595a1ab123e5a1e7c9cec67fd9

  • Size

    96KB

  • Sample

    240610-vzzxfsvbmq

  • MD5

    18620912ba687f56720a7d938c1c309c

  • SHA1

    bda49df344cd4a9dd345052a19ed86b14bf11170

  • SHA256

    cc50812272f08a06b7f5b9c625e8b235abeedf595a1ab123e5a1e7c9cec67fd9

  • SHA512

    d2ef4cd2a7faf387a213ac496d5aa42c7fc64b44d2114c6c46980231b7ea82d25317cf4380a980e6b8e568eadaf43309487f5eda0e3258a577f0ceceb011708c

  • SSDEEP

    1536:WnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:WGs8cd8eXlYairZYqMddH13L

Score
10/10
neconydtrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      cc50812272f08a06b7f5b9c625e8b235abeedf595a1ab123e5a1e7c9cec67fd9

    • Size

      96KB

    • MD5

      18620912ba687f56720a7d938c1c309c

    • SHA1

      bda49df344cd4a9dd345052a19ed86b14bf11170

    • SHA256

      cc50812272f08a06b7f5b9c625e8b235abeedf595a1ab123e5a1e7c9cec67fd9

    • SHA512

      d2ef4cd2a7faf387a213ac496d5aa42c7fc64b44d2114c6c46980231b7ea82d25317cf4380a980e6b8e568eadaf43309487f5eda0e3258a577f0ceceb011708c

    • SSDEEP

      1536:WnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:WGs8cd8eXlYairZYqMddH13L

    Score
    10/10
    neconydtrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Detects executables built or packed with MPress PE compressor

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks