Overview

overview

10

Static

static

10

JaffaCakes...b5.exe

windows7-x64

10

JaffaCakes...b5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_ff49e72ad68a412debd2d538c47914b5

  • Size

    68KB

  • Sample

    250111-mz865axkhw

  • MD5

    ff49e72ad68a412debd2d538c47914b5

  • SHA1

    4d2e6c367834f0e9cf0ee393fbf3ab2038fbf89b

  • SHA256

    ca252b3cf3a4886d723368026ab0fbb29c0a469158cedee9c74dd0c08498c9bc

  • SHA512

    c03621f31ba7591b43271d906ec7e0b97084fd442e69a3b7062ab6eec4c0f4e4d1c2585042167725eef3a07aa96f6ad1a931ccefff378bf04dbf4d56196c7998

  • SSDEEP

    1536:7d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:LdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      JaffaCakes118_ff49e72ad68a412debd2d538c47914b5

    • Size

      68KB

    • MD5

      ff49e72ad68a412debd2d538c47914b5

    • SHA1

      4d2e6c367834f0e9cf0ee393fbf3ab2038fbf89b

    • SHA256

      ca252b3cf3a4886d723368026ab0fbb29c0a469158cedee9c74dd0c08498c9bc

    • SHA512

      c03621f31ba7591b43271d906ec7e0b97084fd442e69a3b7062ab6eec4c0f4e4d1c2585042167725eef3a07aa96f6ad1a931ccefff378bf04dbf4d56196c7998

    • SSDEEP

      1536:7d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:LdseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks