Overview

overview

10

Static

static

3

2a1a5c77cd...42.exe

windows7-x64

10

2a1a5c77cd...42.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a1a5c77cd97606c5accdd839862a6d53d5f8d080b61e0399f7085534e156842

  • Size

    96KB

  • Sample

    250109-11ntgavler

  • MD5

    935034ed710c7393ffc572c5f46674cd

  • SHA1

    0d5e36171d8491af625a580969badcb4805c62fb

  • SHA256

    2a1a5c77cd97606c5accdd839862a6d53d5f8d080b61e0399f7085534e156842

  • SHA512

    cbaba63a8b020aa64318c7c78b07d5d6c242b97a6c229c26676b64c6f8298208d7c61ea577b8a3fec5f1505b965b886d09cf149ec6c13ddeccab0a375cdf50f1

  • SSDEEP

    1536:lnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxb:lGs8cd8eXlYairZYqMddH13b

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      2a1a5c77cd97606c5accdd839862a6d53d5f8d080b61e0399f7085534e156842

    • Size

      96KB

    • MD5

      935034ed710c7393ffc572c5f46674cd

    • SHA1

      0d5e36171d8491af625a580969badcb4805c62fb

    • SHA256

      2a1a5c77cd97606c5accdd839862a6d53d5f8d080b61e0399f7085534e156842

    • SHA512

      cbaba63a8b020aa64318c7c78b07d5d6c242b97a6c229c26676b64c6f8298208d7c61ea577b8a3fec5f1505b965b886d09cf149ec6c13ddeccab0a375cdf50f1

    • SSDEEP

      1536:lnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxb:lGs8cd8eXlYairZYqMddH13b

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks