Overview

overview

10

Static

static

3

9a71894a23...92.exe

windows7-x64

10

9a71894a23...92.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9a71894a23cf803d357cab87d709bc66acdf7285b18a572c8f65c550400e6192

  • Size

    96KB

  • Sample

    241128-by2j4svrfq

  • MD5

    468f4e308bec51282f209fa085b68c7c

  • SHA1

    2dab0eb298d5033b0b0ebc2c6a001c24f59e7b8d

  • SHA256

    9a71894a23cf803d357cab87d709bc66acdf7285b18a572c8f65c550400e6192

  • SHA512

    e4de47196429da4608890eda4fce50741ff8996e6b1597d7ff43c4f2a4149dce390318c097ace1c1b726a791c0792c11bbeeb5d2c8ae1a9d1520cc5e308d4b58

  • SSDEEP

    1536:3nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxR:3Gs8cd8eXlYairZYqMddH13R

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      9a71894a23cf803d357cab87d709bc66acdf7285b18a572c8f65c550400e6192

    • Size

      96KB

    • MD5

      468f4e308bec51282f209fa085b68c7c

    • SHA1

      2dab0eb298d5033b0b0ebc2c6a001c24f59e7b8d

    • SHA256

      9a71894a23cf803d357cab87d709bc66acdf7285b18a572c8f65c550400e6192

    • SHA512

      e4de47196429da4608890eda4fce50741ff8996e6b1597d7ff43c4f2a4149dce390318c097ace1c1b726a791c0792c11bbeeb5d2c8ae1a9d1520cc5e308d4b58

    • SSDEEP

      1536:3nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxR:3Gs8cd8eXlYairZYqMddH13R

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks