Overview

overview

10

Static

static

10

JaffaCakes...20.exe

windows7-x64

10

JaffaCakes...20.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_32c86669e13130f626559270d700b220

  • Size

    64KB

  • Sample

    250106-wsgb7stkhv

  • MD5

    32c86669e13130f626559270d700b220

  • SHA1

    e34bb4ee888e90fc93ccf17de7a94b3e2e0a5c10

  • SHA256

    516ee6f6a9ca8ea6b3107077c120a92713ce464971d821df7d30f202c7ad5790

  • SHA512

    e8be616e4c26fe1c2b57d659b744dec71e49ef15ec4dc9952c0b4b2de0afaadd4d2f17ebfb7e5068a60e5c508ef373bfcca9e7ebd8aedbebe0741b8d90a8b0fc

  • SSDEEP

    1536:Ed9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:8dseIOMEZEyFjEOFqTiQm5l/5

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      JaffaCakes118_32c86669e13130f626559270d700b220

    • Size

      64KB

    • MD5

      32c86669e13130f626559270d700b220

    • SHA1

      e34bb4ee888e90fc93ccf17de7a94b3e2e0a5c10

    • SHA256

      516ee6f6a9ca8ea6b3107077c120a92713ce464971d821df7d30f202c7ad5790

    • SHA512

      e8be616e4c26fe1c2b57d659b744dec71e49ef15ec4dc9952c0b4b2de0afaadd4d2f17ebfb7e5068a60e5c508ef373bfcca9e7ebd8aedbebe0741b8d90a8b0fc

    • SSDEEP

      1536:Ed9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:8dseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks