Overview

overview

10

Static

static

3

93e7cc7e87...9N.exe

windows7-x64

10

93e7cc7e87...9N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    93e7cc7e87b8f8ea1669d3c349bf5f2a704596aa1694ee24e6b39f01f3168f19N.exe

  • Size

    96KB

  • Sample

    250111-hqqafasmcn

  • MD5

    7cf5710b6312198f6ba4c3c03656deb0

  • SHA1

    043d29d59d239d30ddc7573df9bf7ce99d2d3369

  • SHA256

    93e7cc7e87b8f8ea1669d3c349bf5f2a704596aa1694ee24e6b39f01f3168f19

  • SHA512

    77487984acede01d4c3fb74dbcbb097898ed351747c3b5173dbad9f763d7689f8cfed4ace9bd47d00e439325d166f61c032df1f279c5b2e955babd3bccbc6645

  • SSDEEP

    1536:KnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:KGs8cd8eXlYairZYqMddH13L

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      93e7cc7e87b8f8ea1669d3c349bf5f2a704596aa1694ee24e6b39f01f3168f19N.exe

    • Size

      96KB

    • MD5

      7cf5710b6312198f6ba4c3c03656deb0

    • SHA1

      043d29d59d239d30ddc7573df9bf7ce99d2d3369

    • SHA256

      93e7cc7e87b8f8ea1669d3c349bf5f2a704596aa1694ee24e6b39f01f3168f19

    • SHA512

      77487984acede01d4c3fb74dbcbb097898ed351747c3b5173dbad9f763d7689f8cfed4ace9bd47d00e439325d166f61c032df1f279c5b2e955babd3bccbc6645

    • SSDEEP

      1536:KnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:KGs8cd8eXlYairZYqMddH13L

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks