Overview

overview

10

Static

static

3

d7a34071cf...7N.exe

windows7-x64

10

d7a34071cf...7N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d7a34071cf9f2ea779befb789917ee38e56db1b14d3ec0faa8a013c87fbd38e7N.exe

  • Size

    134KB

  • Sample

    241216-p67b8a1kd1

  • MD5

    e6c8b2ebde224a97b946084aa466a5a0

  • SHA1

    08540d457b47b3971d99f91e08070a5838c71d0b

  • SHA256

    d7a34071cf9f2ea779befb789917ee38e56db1b14d3ec0faa8a013c87fbd38e7

  • SHA512

    8e2b539db918ffc9d19c0032d190413b013842475183749a273212f85cf9316ae65608437ba0fae35e0a256450e0b4d892cf2d02d6d598f4a31ced262762598e

  • SSDEEP

    1536:PDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCia:7iRTeH0iqAW6J6f1tqF6dngNmaZCia

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      d7a34071cf9f2ea779befb789917ee38e56db1b14d3ec0faa8a013c87fbd38e7N.exe

    • Size

      134KB

    • MD5

      e6c8b2ebde224a97b946084aa466a5a0

    • SHA1

      08540d457b47b3971d99f91e08070a5838c71d0b

    • SHA256

      d7a34071cf9f2ea779befb789917ee38e56db1b14d3ec0faa8a013c87fbd38e7

    • SHA512

      8e2b539db918ffc9d19c0032d190413b013842475183749a273212f85cf9316ae65608437ba0fae35e0a256450e0b4d892cf2d02d6d598f4a31ced262762598e

    • SSDEEP

      1536:PDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCia:7iRTeH0iqAW6J6f1tqF6dngNmaZCia

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks