Overview

overview

10

Static

static

3

02da2e9982...27.exe

windows7-x64

10

02da2e9982...27.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02da2e998256c3d3112048fc9bca8e1a052587485d1d65c8c0b0a0c67813a227.exe

  • Size

    96KB

  • Sample

    241205-rpqn9atrgq

  • MD5

    e4d210130cb796ea8140214c01d1f144

  • SHA1

    1915311f004eccceacc1d1f5d711efe15bb2ce3f

  • SHA256

    02da2e998256c3d3112048fc9bca8e1a052587485d1d65c8c0b0a0c67813a227

  • SHA512

    956c2f23db35d87bb86ce9423634c4f2319394c1c5c5eaa2f0481391b012187997e52361e7e65c301d6cac779c265b68b1a9e2fd413b3a0e317e2f5150ae5d51

  • SSDEEP

    1536:jnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxj:jGs8cd8eXlYairZYqMddH13j

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      02da2e998256c3d3112048fc9bca8e1a052587485d1d65c8c0b0a0c67813a227.exe

    • Size

      96KB

    • MD5

      e4d210130cb796ea8140214c01d1f144

    • SHA1

      1915311f004eccceacc1d1f5d711efe15bb2ce3f

    • SHA256

      02da2e998256c3d3112048fc9bca8e1a052587485d1d65c8c0b0a0c67813a227

    • SHA512

      956c2f23db35d87bb86ce9423634c4f2319394c1c5c5eaa2f0481391b012187997e52361e7e65c301d6cac779c265b68b1a9e2fd413b3a0e317e2f5150ae5d51

    • SSDEEP

      1536:jnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxj:jGs8cd8eXlYairZYqMddH13j

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks