Overview

overview

10

Static

static

3

33aef9a5f4...2b.exe

windows7-x64

10

33aef9a5f4...2b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    33aef9a5f44190dc8c548e93355d80a10fb31093f8c2f3e541c6159bb492832b

  • Size

    96KB

  • Sample

    250109-2plqeawjaq

  • MD5

    8cf5d2de5a442b238701e0c509d5dbed

  • SHA1

    5621535b5949f5ab0b93de04939da73d4efb3720

  • SHA256

    33aef9a5f44190dc8c548e93355d80a10fb31093f8c2f3e541c6159bb492832b

  • SHA512

    aec251a989d46f3cb7949574b0c46dce0ca003bab515c8b5cae44442411f0deb5d857ebe3a754439ef4aec15287c9367467c799fbeeb01a6216a58e4cbdba35c

  • SSDEEP

    1536:7nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:7Gs8cd8eXlYairZYqMddH13L

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      33aef9a5f44190dc8c548e93355d80a10fb31093f8c2f3e541c6159bb492832b

    • Size

      96KB

    • MD5

      8cf5d2de5a442b238701e0c509d5dbed

    • SHA1

      5621535b5949f5ab0b93de04939da73d4efb3720

    • SHA256

      33aef9a5f44190dc8c548e93355d80a10fb31093f8c2f3e541c6159bb492832b

    • SHA512

      aec251a989d46f3cb7949574b0c46dce0ca003bab515c8b5cae44442411f0deb5d857ebe3a754439ef4aec15287c9367467c799fbeeb01a6216a58e4cbdba35c

    • SSDEEP

      1536:7nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:7Gs8cd8eXlYairZYqMddH13L

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks