Overview

overview

10

Static

static

3

0b12e29b97...96.exe

windows7-x64

10

0b12e29b97...96.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0b12e29b9752eeb4790ff38e7fb500064174730d83c91e5c2677cfdc22eb0896

  • Size

    96KB

  • Sample

    250112-yctnpswlhv

  • MD5

    d1089bf6eeff7a890d0757d7e20e5cbc

  • SHA1

    efc1a74abe9efface024d2e3b19723e0ce383ceb

  • SHA256

    0b12e29b9752eeb4790ff38e7fb500064174730d83c91e5c2677cfdc22eb0896

  • SHA512

    a44f7521b15744450ed40d0ee1d067c9808d58f6014b882409e5458d5a3d786a2f7d26ba4b07cbdd1ef241592739d313e5bb710895f00e31d45afe92c03d1a59

  • SSDEEP

    1536:1nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:1Gs8cd8eXlYairZYqMddH13L

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      0b12e29b9752eeb4790ff38e7fb500064174730d83c91e5c2677cfdc22eb0896

    • Size

      96KB

    • MD5

      d1089bf6eeff7a890d0757d7e20e5cbc

    • SHA1

      efc1a74abe9efface024d2e3b19723e0ce383ceb

    • SHA256

      0b12e29b9752eeb4790ff38e7fb500064174730d83c91e5c2677cfdc22eb0896

    • SHA512

      a44f7521b15744450ed40d0ee1d067c9808d58f6014b882409e5458d5a3d786a2f7d26ba4b07cbdd1ef241592739d313e5bb710895f00e31d45afe92c03d1a59

    • SSDEEP

      1536:1nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:1Gs8cd8eXlYairZYqMddH13L

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks