Overview

overview

10

Static

static

3

33cf1c4378...8N.exe

windows7-x64

10

33cf1c4378...8N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    33cf1c4378fdc3eb723766756999531f79550f8e2f00211347500ad884d22218N.exe

  • Size

    134KB

  • Sample

    241124-t7wpbsvmgn

  • MD5

    2d2b896bc5927ae4f546c11a96627120

  • SHA1

    60b22009f42bba5fec83e4e6c6e5e44dcfd4de56

  • SHA256

    33cf1c4378fdc3eb723766756999531f79550f8e2f00211347500ad884d22218

  • SHA512

    a9b0b63aae157717bf4054d4a5028f21040fc8cf33f32dae7cde5656f7203701c92e60e33f9eef55123bf7c3b2eea29528b85b25cae2fb48d044e6fbd7a98b8c

  • SSDEEP

    1536:jDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCin:viRTeH0iqAW6J6f1tqF6dngNmaZCiaG

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      33cf1c4378fdc3eb723766756999531f79550f8e2f00211347500ad884d22218N.exe

    • Size

      134KB

    • MD5

      2d2b896bc5927ae4f546c11a96627120

    • SHA1

      60b22009f42bba5fec83e4e6c6e5e44dcfd4de56

    • SHA256

      33cf1c4378fdc3eb723766756999531f79550f8e2f00211347500ad884d22218

    • SHA512

      a9b0b63aae157717bf4054d4a5028f21040fc8cf33f32dae7cde5656f7203701c92e60e33f9eef55123bf7c3b2eea29528b85b25cae2fb48d044e6fbd7a98b8c

    • SSDEEP

      1536:jDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCin:viRTeH0iqAW6J6f1tqF6dngNmaZCiaG

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks