Overview

overview

10

Static

static

10

JaffaCakes...b6.exe

windows7-x64

10

JaffaCakes...b6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_87cbfd346ff998f68e9a68598c5e58b6

  • Size

    63KB

  • Sample

    250108-dlzabs1pfx

  • MD5

    87cbfd346ff998f68e9a68598c5e58b6

  • SHA1

    dfc65a423659c6b76e3fa5eff80117415cf2ec73

  • SHA256

    3291b6711f33d62a65b868363465c75c38dc19df4e3bfc47921d1717516d3589

  • SHA512

    e82acbeb0654ed3f6fb8a0a2caaccbe46204cc5c0745acbc6eb522e0a8df3ff1fa6395591007980f99599f5770c4e756d9043570beaea4ad4e9bf308dd7b488e

  • SSDEEP

    768:4fMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:4fbIvYvZEyFKF6N4yS+AQmZTl/5

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      JaffaCakes118_87cbfd346ff998f68e9a68598c5e58b6

    • Size

      63KB

    • MD5

      87cbfd346ff998f68e9a68598c5e58b6

    • SHA1

      dfc65a423659c6b76e3fa5eff80117415cf2ec73

    • SHA256

      3291b6711f33d62a65b868363465c75c38dc19df4e3bfc47921d1717516d3589

    • SHA512

      e82acbeb0654ed3f6fb8a0a2caaccbe46204cc5c0745acbc6eb522e0a8df3ff1fa6395591007980f99599f5770c4e756d9043570beaea4ad4e9bf308dd7b488e

    • SSDEEP

      768:4fMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:4fbIvYvZEyFKF6N4yS+AQmZTl/5

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks