Overview

overview

10

Static

static

3

df08662b84...bN.exe

windows7-x64

10

df08662b84...bN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df08662b8426f1582302f90c28fcb69dd70f8c8301eedcc9f2006209d1c62d5bN.exe

  • Size

    96KB

  • Sample

    241230-3jpesatpdn

  • MD5

    73ca9a3ec1d1f5042be522712a9096b0

  • SHA1

    2aa3b4289e28c1f855059f4842203d9d26f7dffd

  • SHA256

    df08662b8426f1582302f90c28fcb69dd70f8c8301eedcc9f2006209d1c62d5b

  • SHA512

    93c892d260b0e3dfb58e8459b3e5215d5a5ac5efd4066a59f62b67e4ec6c7152b2e879cc9722c2dadf0498ddc79546badd52b90bb1828a2488f99f54bc5ccb64

  • SSDEEP

    1536:ynAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxz:yGs8cd8eXlYairZYqMddH13z

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      df08662b8426f1582302f90c28fcb69dd70f8c8301eedcc9f2006209d1c62d5bN.exe

    • Size

      96KB

    • MD5

      73ca9a3ec1d1f5042be522712a9096b0

    • SHA1

      2aa3b4289e28c1f855059f4842203d9d26f7dffd

    • SHA256

      df08662b8426f1582302f90c28fcb69dd70f8c8301eedcc9f2006209d1c62d5b

    • SHA512

      93c892d260b0e3dfb58e8459b3e5215d5a5ac5efd4066a59f62b67e4ec6c7152b2e879cc9722c2dadf0498ddc79546badd52b90bb1828a2488f99f54bc5ccb64

    • SSDEEP

      1536:ynAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxz:yGs8cd8eXlYairZYqMddH13z

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks