Overview

overview

10

Static

static

3

7477b1e11e...bN.exe

windows7-x64

10

7477b1e11e...bN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7477b1e11ef2df625c00fefe47f6655dcd987b6ce9e3f5db612079f59518e8ebN.exe

  • Size

    96KB

  • Sample

    250115-14ae9aylaj

  • MD5

    bc3605cf527687ece09deda62011fe30

  • SHA1

    17e76cae976757717c6f95ee80865852bc19dd47

  • SHA256

    7477b1e11ef2df625c00fefe47f6655dcd987b6ce9e3f5db612079f59518e8eb

  • SHA512

    769481f7c9784712b0348ac5d8a97eeaa59f1d23a754d86210eab3a233a498375f0fa629349d502c901737247d90b696e5f63ffa805d2cd14a775e816f09f51b

  • SSDEEP

    1536:pnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxz:pGs8cd8eXlYairZYqMddH13z

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      7477b1e11ef2df625c00fefe47f6655dcd987b6ce9e3f5db612079f59518e8ebN.exe

    • Size

      96KB

    • MD5

      bc3605cf527687ece09deda62011fe30

    • SHA1

      17e76cae976757717c6f95ee80865852bc19dd47

    • SHA256

      7477b1e11ef2df625c00fefe47f6655dcd987b6ce9e3f5db612079f59518e8eb

    • SHA512

      769481f7c9784712b0348ac5d8a97eeaa59f1d23a754d86210eab3a233a498375f0fa629349d502c901737247d90b696e5f63ffa805d2cd14a775e816f09f51b

    • SSDEEP

      1536:pnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxz:pGs8cd8eXlYairZYqMddH13z

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks