Overview

overview

10

Static

static

3

c02e508952...43.exe

windows7-x64

10

c02e508952...43.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c02e508952d9104df5ffa75078754ef36be4a8806aacc0e6c0d5d7b09b5c0a43

  • Size

    96KB

  • Sample

    241202-ckhqhstnhs

  • MD5

    7c9673f460d47c60a428b24e95da3234

  • SHA1

    db93ad32c3a13eaa5125883eba263c92e2ec9860

  • SHA256

    c02e508952d9104df5ffa75078754ef36be4a8806aacc0e6c0d5d7b09b5c0a43

  • SHA512

    34d78af9ae82942af4423b61b8ed662c14b6eb4d1af71cbf00ecdf00aa544f7d82a4466c601a75bcdd471f402138477f7b1b4c439a4a27410cddba6d08c8b90f

  • SSDEEP

    1536:dnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:dGs8cd8eXlYairZYqMddH13L

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      c02e508952d9104df5ffa75078754ef36be4a8806aacc0e6c0d5d7b09b5c0a43

    • Size

      96KB

    • MD5

      7c9673f460d47c60a428b24e95da3234

    • SHA1

      db93ad32c3a13eaa5125883eba263c92e2ec9860

    • SHA256

      c02e508952d9104df5ffa75078754ef36be4a8806aacc0e6c0d5d7b09b5c0a43

    • SHA512

      34d78af9ae82942af4423b61b8ed662c14b6eb4d1af71cbf00ecdf00aa544f7d82a4466c601a75bcdd471f402138477f7b1b4c439a4a27410cddba6d08c8b90f

    • SSDEEP

      1536:dnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:dGs8cd8eXlYairZYqMddH13L

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks