Overview

overview

10

Static

static

3

22dbaffae0...d1.exe

windows7-x64

10

22dbaffae0...d1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    22dbaffae0785ce8ad3c71bc4b45dfa82c89dabd08bac68733b46e2f5e3281d1

  • Size

    134KB

  • Sample

    241216-y7d7hazjhv

  • MD5

    91c54ffb27d073dbbf36bfd919a4ee08

  • SHA1

    0a100eca495bdc28145bc5183ed5466c8328bc33

  • SHA256

    22dbaffae0785ce8ad3c71bc4b45dfa82c89dabd08bac68733b46e2f5e3281d1

  • SHA512

    6b2e6c9e13d6c79cc740af1737cf5bdb128913c0cc65b999f87f57da9ada5b3706d52298bbebe8907a6aa551f67d8c952cde05b882a620c1f873331fe0b732cf

  • SSDEEP

    1536:7DfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCia:3iRTeH0iqAW6J6f1tqF6dngNmaZCia

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      22dbaffae0785ce8ad3c71bc4b45dfa82c89dabd08bac68733b46e2f5e3281d1

    • Size

      134KB

    • MD5

      91c54ffb27d073dbbf36bfd919a4ee08

    • SHA1

      0a100eca495bdc28145bc5183ed5466c8328bc33

    • SHA256

      22dbaffae0785ce8ad3c71bc4b45dfa82c89dabd08bac68733b46e2f5e3281d1

    • SHA512

      6b2e6c9e13d6c79cc740af1737cf5bdb128913c0cc65b999f87f57da9ada5b3706d52298bbebe8907a6aa551f67d8c952cde05b882a620c1f873331fe0b732cf

    • SSDEEP

      1536:7DfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCia:3iRTeH0iqAW6J6f1tqF6dngNmaZCia

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks