Overview

overview

10

Static

static

3

17b4c42e92...90.exe

windows7-x64

10

17b4c42e92...90.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17b4c42e925447da9056b400b15ff246e0a736295dcda1eef2145981cd51ce90.exe

  • Size

    96KB

  • Sample

    241202-f6gbcsxjfm

  • MD5

    32686f40eab1e6acfa80d4445faef879

  • SHA1

    87c90e4237a46b7fece4b1a1f53213d2b337e0d3

  • SHA256

    17b4c42e925447da9056b400b15ff246e0a736295dcda1eef2145981cd51ce90

  • SHA512

    2dfee0aa179135e42a7bfc61a69adef1ccaa08ee6f5210f4b5691fff377ac9ea015d1377f576b1034777d78a013ef51457ffdaddc4b5854b7764882d562bdf36

  • SSDEEP

    1536:BnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxR:BGs8cd8eXlYairZYqMddH13R

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      17b4c42e925447da9056b400b15ff246e0a736295dcda1eef2145981cd51ce90.exe

    • Size

      96KB

    • MD5

      32686f40eab1e6acfa80d4445faef879

    • SHA1

      87c90e4237a46b7fece4b1a1f53213d2b337e0d3

    • SHA256

      17b4c42e925447da9056b400b15ff246e0a736295dcda1eef2145981cd51ce90

    • SHA512

      2dfee0aa179135e42a7bfc61a69adef1ccaa08ee6f5210f4b5691fff377ac9ea015d1377f576b1034777d78a013ef51457ffdaddc4b5854b7764882d562bdf36

    • SSDEEP

      1536:BnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxR:BGs8cd8eXlYairZYqMddH13R

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks