Overview

overview

10

Static

static

3

c4d858433c...bc.exe

windows7-x64

10

c4d858433c...bc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c4d858433c59f758a00826c19c0d95e5ba201d66b4faab2eaccf5115380c2dbc

  • Size

    96KB

  • Sample

    250113-gs2wkssjak

  • MD5

    f48861c25b79ec043939e02f8d9728eb

  • SHA1

    c58d1c5d7431c3eeffcbb361a4c5e8c81b902b96

  • SHA256

    c4d858433c59f758a00826c19c0d95e5ba201d66b4faab2eaccf5115380c2dbc

  • SHA512

    70306477fc9e129f369c95addcc74e0fd835107e2e07d486970d93c3d6ad88ae74d239f45696a817d2e51759433539363fb254518eb6282781392933f25391ad

  • SSDEEP

    1536:VnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxb:VGs8cd8eXlYairZYqMddH13b

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      c4d858433c59f758a00826c19c0d95e5ba201d66b4faab2eaccf5115380c2dbc

    • Size

      96KB

    • MD5

      f48861c25b79ec043939e02f8d9728eb

    • SHA1

      c58d1c5d7431c3eeffcbb361a4c5e8c81b902b96

    • SHA256

      c4d858433c59f758a00826c19c0d95e5ba201d66b4faab2eaccf5115380c2dbc

    • SHA512

      70306477fc9e129f369c95addcc74e0fd835107e2e07d486970d93c3d6ad88ae74d239f45696a817d2e51759433539363fb254518eb6282781392933f25391ad

    • SSDEEP

      1536:VnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxb:VGs8cd8eXlYairZYqMddH13b

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks