Overview

overview

10

Static

static

3

f1de45b2c0...b6.exe

windows7-x64

10

f1de45b2c0...b6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f1de45b2c0d4a42ee7e8ad45b6e37f96c2c5683667eaa6c517de51e08fe8d5b6.exe

  • Size

    96KB

  • Sample

    241231-pgcrbaslfk

  • MD5

    387ab07cb92996adfd023c9dff37a8ae

  • SHA1

    176de07c60e6af19833c8b4243a34774beb56533

  • SHA256

    f1de45b2c0d4a42ee7e8ad45b6e37f96c2c5683667eaa6c517de51e08fe8d5b6

  • SHA512

    aa6d659c94f27baffb2d7e223073969075706bca1933b43e47193e4a3a5d5196d3a4de1faa8a767340d17c6fe5cb9ff81def7a7d07783d7735fc904abfacf8b5

  • SSDEEP

    1536:JnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxr:JGs8cd8eXlYairZYqMddH13r

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      f1de45b2c0d4a42ee7e8ad45b6e37f96c2c5683667eaa6c517de51e08fe8d5b6.exe

    • Size

      96KB

    • MD5

      387ab07cb92996adfd023c9dff37a8ae

    • SHA1

      176de07c60e6af19833c8b4243a34774beb56533

    • SHA256

      f1de45b2c0d4a42ee7e8ad45b6e37f96c2c5683667eaa6c517de51e08fe8d5b6

    • SHA512

      aa6d659c94f27baffb2d7e223073969075706bca1933b43e47193e4a3a5d5196d3a4de1faa8a767340d17c6fe5cb9ff81def7a7d07783d7735fc904abfacf8b5

    • SSDEEP

      1536:JnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxr:JGs8cd8eXlYairZYqMddH13r

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks