Extracted

• • Target

    ef4fa9b004946c519d1df02891808e66f59904036364f3fd8b271d9e072daa7c

  • Size

    96KB

  • MD5

    f8a08329c22573430f4c245f838c66a9

  • SHA1

    bae4f0a052a2d0faf497a64949b6ee8fb32d6261

  • SHA256

    ef4fa9b004946c519d1df02891808e66f59904036364f3fd8b271d9e072daa7c

  • SHA512

    ef84286ac76a894c11b1cd6b7bb88ba0d209eb95653ede138be8a1a69f9e442135800680dc63c7690ac2c099bf52f5911687db106e56090605199679c81692ac

  • SSDEEP

    1536:9nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxB:9Gs8cd8eXlYairZYqMddH13B

  Score

  10^/10

  neconyddiscoverytrojan

  • Neconyd

    Neconyd is a trojan written in C++.

    trojanneconyd

  • Neconyd family

    neconyd

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  • Suspicious use of SetThreadContext

  behavioral1behavioral2