Overview

overview

10

Static

static

3

a6c42b7271...72.exe

windows7-x64

10

a6c42b7271...72.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a6c42b7271311b3b9342592c02b9b63f3761c2c13aa47446941320620c550b72

  • Size

    96KB

  • Sample

    250104-dztxrsypaw

  • MD5

    891320169ee28e07d8599c634ed47b63

  • SHA1

    9165a1f25596e23bae9922cc8c58d2785b72d210

  • SHA256

    a6c42b7271311b3b9342592c02b9b63f3761c2c13aa47446941320620c550b72

  • SHA512

    a69c1e3e92293d1e2e457179b8396a4c41c8ff3ee3827bef444486756c2c39000de37d719cf38c13fa29109990514ebb50ae03e8f1cdadcef55cc1ddd058da4c

  • SSDEEP

    1536:SnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:SGs8cd8eXlYairZYqMddH13L

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      a6c42b7271311b3b9342592c02b9b63f3761c2c13aa47446941320620c550b72

    • Size

      96KB

    • MD5

      891320169ee28e07d8599c634ed47b63

    • SHA1

      9165a1f25596e23bae9922cc8c58d2785b72d210

    • SHA256

      a6c42b7271311b3b9342592c02b9b63f3761c2c13aa47446941320620c550b72

    • SHA512

      a69c1e3e92293d1e2e457179b8396a4c41c8ff3ee3827bef444486756c2c39000de37d719cf38c13fa29109990514ebb50ae03e8f1cdadcef55cc1ddd058da4c

    • SSDEEP

      1536:SnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:SGs8cd8eXlYairZYqMddH13L

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks