Overview

overview

10

Static

static

3

dbe28c1e7e...9N.exe

windows7-x64

10

dbe28c1e7e...9N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dbe28c1e7ed67ebaacd6e85f0189356720badc2839c932b0320ff9b6f94bb469N.exe

  • Size

    96KB

  • Sample

    250103-wj3tvawke1

  • MD5

    82bbb006b062bb4abcfa4f23d8657960

  • SHA1

    4fed425c1d5f832e8996c3c877ba2933a5d904c5

  • SHA256

    dbe28c1e7ed67ebaacd6e85f0189356720badc2839c932b0320ff9b6f94bb469

  • SHA512

    55710cbe8106aa67755e57323d8731c0dea40717a54ce66f0aee9ece962e21bae86117d0eb5d9c430c5b3ac9b39f0a7cca620f59f70beb2facc2331e1d32e1d6

  • SSDEEP

    1536:SnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxz:SGs8cd8eXlYairZYqMddH13z

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      dbe28c1e7ed67ebaacd6e85f0189356720badc2839c932b0320ff9b6f94bb469N.exe

    • Size

      96KB

    • MD5

      82bbb006b062bb4abcfa4f23d8657960

    • SHA1

      4fed425c1d5f832e8996c3c877ba2933a5d904c5

    • SHA256

      dbe28c1e7ed67ebaacd6e85f0189356720badc2839c932b0320ff9b6f94bb469

    • SHA512

      55710cbe8106aa67755e57323d8731c0dea40717a54ce66f0aee9ece962e21bae86117d0eb5d9c430c5b3ac9b39f0a7cca620f59f70beb2facc2331e1d32e1d6

    • SSDEEP

      1536:SnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxz:SGs8cd8eXlYairZYqMddH13z

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks