Overview

overview

10

Static

static

3

53bc90e91b...31.exe

windows7-x64

10

53bc90e91b...31.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    53bc90e91b950fe98d8c343cc7449809ac16b8765534a277cc6fea7d8d8ad031.exe

  • Size

    96KB

  • Sample

    241231-c7yegsznhp

  • MD5

    c9348dc0cba4f73aa81a51eeb138d893

  • SHA1

    0c7f37321170c0f77aa81fb0f58d64a3a8eef7c7

  • SHA256

    53bc90e91b950fe98d8c343cc7449809ac16b8765534a277cc6fea7d8d8ad031

  • SHA512

    8e130ee50c0490a264c724f66da367a55daa7ca4cf68ae67b786bbb926654e66850da3581d0d2de5cf51606439049357a68de2451b075eb81bfad4889b7b25e8

  • SSDEEP

    1536:ynAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxZ:yGs8cd8eXlYairZYqMddH13Z

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      53bc90e91b950fe98d8c343cc7449809ac16b8765534a277cc6fea7d8d8ad031.exe

    • Size

      96KB

    • MD5

      c9348dc0cba4f73aa81a51eeb138d893

    • SHA1

      0c7f37321170c0f77aa81fb0f58d64a3a8eef7c7

    • SHA256

      53bc90e91b950fe98d8c343cc7449809ac16b8765534a277cc6fea7d8d8ad031

    • SHA512

      8e130ee50c0490a264c724f66da367a55daa7ca4cf68ae67b786bbb926654e66850da3581d0d2de5cf51606439049357a68de2451b075eb81bfad4889b7b25e8

    • SSDEEP

      1536:ynAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxZ:yGs8cd8eXlYairZYqMddH13Z

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks