Overview

overview

10

Static

static

3

a525347c7c...ce.exe

windows7-x64

10

a525347c7c...ce.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a525347c7c8019774a328fd8dc8ea209c351a4dce07a94771e7c67212fae8ece.exe

  • Size

    96KB

  • Sample

    250116-a3ltsatmgl

  • MD5

    c709c8f097c6705265411c7a8b92f632

  • SHA1

    57b68849fd4871d5779dcca7c5cea0e34d69c14b

  • SHA256

    a525347c7c8019774a328fd8dc8ea209c351a4dce07a94771e7c67212fae8ece

  • SHA512

    ca334b1714464066cd7cb3e956aeeed5d76d84cd3f86e54dc6307ee6f45f44dd636fef673f643e0489cfa13d49df6a4678df016401ff000eae93f6eda80aee6b

  • SSDEEP

    1536:pnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:pGs8cd8eXlYairZYqMddH13L

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      a525347c7c8019774a328fd8dc8ea209c351a4dce07a94771e7c67212fae8ece.exe

    • Size

      96KB

    • MD5

      c709c8f097c6705265411c7a8b92f632

    • SHA1

      57b68849fd4871d5779dcca7c5cea0e34d69c14b

    • SHA256

      a525347c7c8019774a328fd8dc8ea209c351a4dce07a94771e7c67212fae8ece

    • SHA512

      ca334b1714464066cd7cb3e956aeeed5d76d84cd3f86e54dc6307ee6f45f44dd636fef673f643e0489cfa13d49df6a4678df016401ff000eae93f6eda80aee6b

    • SSDEEP

      1536:pnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:pGs8cd8eXlYairZYqMddH13L

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks