Extracted

• • Target

    22b87a34441e4c160435154bad2213ddabb354855263d85648149e1818270f22.exe

  • Size

    96KB

  • MD5

    e7668caa2e090dfeac6d3372f9da33f3

  • SHA1

    4053cca1aebef18c1db64687a1a5cf1cff4d1172

  • SHA256

    22b87a34441e4c160435154bad2213ddabb354855263d85648149e1818270f22

  • SHA512

    865d484c1bcdd7cf921916322b6c076132fab26eabe2cc8240f9f15d28b1dce444a00e8aaefef7d3c1a34aa1e7de3afce34af6f83b5f41805382051f348b4fa3

  • SSDEEP

    1536:dnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxh:dGs8cd8eXlYairZYqMddH13h

  Score

  10^/10

  neconyddiscoverytrojan

  • Neconyd

    Neconyd is a trojan written in C++.

    trojanneconyd

  • Neconyd family

    neconyd

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  • Suspicious use of SetThreadContext

  behavioral1behavioral2