Overview

overview

10

Static

static

3

0e795eaeda...9N.exe

windows7-x64

10

0e795eaeda...9N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0e795eaedae5e32594d34df2b5cd4d91d3442f15359de6b4e980b4eb8644fd39N.exe

  • Size

    134KB

  • Sample

    241125-3wsyqssqfs

  • MD5

    fb41407c183c1dcd0abdf8a420899d80

  • SHA1

    6d14527465cf44fb75034ff6b64633829ff86ed3

  • SHA256

    0e795eaedae5e32594d34df2b5cd4d91d3442f15359de6b4e980b4eb8644fd39

  • SHA512

    36c37fe8774e98b90ab9c846fcd12d397447914e4dde76c30fcc46ac60c7b95097f5485eea83834e9b60cf4432e231c5040d075bcc2fc920a8e68231a2514edb

  • SSDEEP

    1536:BDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCia:hiRTeH0iqAW6J6f1tqF6dngNmaZCia

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      0e795eaedae5e32594d34df2b5cd4d91d3442f15359de6b4e980b4eb8644fd39N.exe

    • Size

      134KB

    • MD5

      fb41407c183c1dcd0abdf8a420899d80

    • SHA1

      6d14527465cf44fb75034ff6b64633829ff86ed3

    • SHA256

      0e795eaedae5e32594d34df2b5cd4d91d3442f15359de6b4e980b4eb8644fd39

    • SHA512

      36c37fe8774e98b90ab9c846fcd12d397447914e4dde76c30fcc46ac60c7b95097f5485eea83834e9b60cf4432e231c5040d075bcc2fc920a8e68231a2514edb

    • SSDEEP

      1536:BDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCia:hiRTeH0iqAW6J6f1tqF6dngNmaZCia

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks