Overview

overview

10

Static

static

10

JaffaCakes...06.exe

windows7-x64

10

JaffaCakes...06.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_c90e59329520071d148b508be0bcc306

  • Size

    63KB

  • Sample

    250109-qjmvqs1jct

  • MD5

    c90e59329520071d148b508be0bcc306

  • SHA1

    93ae2114bc68f0551adc58cf7f69c88834f68cd3

  • SHA256

    eaf6b62336fb0087a36c29a5a2f98d7886c45ce2e99376a81da3b8a4d5deba0a

  • SHA512

    d0303eee7dc77d8030b10b34e23d5f3a1c3a238ec0e21c551e301910f07c3a7ce39fa3f2dcca21dba85af8a064cafafcafefd80a0a235ea03827668865416230

  • SSDEEP

    1536:ld9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:NdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      JaffaCakes118_c90e59329520071d148b508be0bcc306

    • Size

      63KB

    • MD5

      c90e59329520071d148b508be0bcc306

    • SHA1

      93ae2114bc68f0551adc58cf7f69c88834f68cd3

    • SHA256

      eaf6b62336fb0087a36c29a5a2f98d7886c45ce2e99376a81da3b8a4d5deba0a

    • SHA512

      d0303eee7dc77d8030b10b34e23d5f3a1c3a238ec0e21c551e301910f07c3a7ce39fa3f2dcca21dba85af8a064cafafcafefd80a0a235ea03827668865416230

    • SSDEEP

      1536:ld9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:NdseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks