Overview

overview

10

Static

static

3

4d9263337f...4N.exe

windows7-x64

10

4d9263337f...4N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4d9263337fbba1e57004b48e7650ad5c29106ca9b87b92ebc262f5bf6d9dc754N.exe

  • Size

    96KB

  • Sample

    250116-r97s9svrby

  • MD5

    c3c9082ca4d6f729c7cb85020d976e80

  • SHA1

    36850f28b3bf166fcf19d73dcedcfcfff0905f2b

  • SHA256

    4d9263337fbba1e57004b48e7650ad5c29106ca9b87b92ebc262f5bf6d9dc754

  • SHA512

    76adb5e809b78b5e027b0bc25e0cb3604d7872d0664b76ec61c93118ec5f43141a708eb7fd9b20272abe3dedbb35f71e55046c5b344377afd9121b41f3bf790d

  • SSDEEP

    1536:snAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxb:sGs8cd8eXlYairZYqMddH13b

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      4d9263337fbba1e57004b48e7650ad5c29106ca9b87b92ebc262f5bf6d9dc754N.exe

    • Size

      96KB

    • MD5

      c3c9082ca4d6f729c7cb85020d976e80

    • SHA1

      36850f28b3bf166fcf19d73dcedcfcfff0905f2b

    • SHA256

      4d9263337fbba1e57004b48e7650ad5c29106ca9b87b92ebc262f5bf6d9dc754

    • SHA512

      76adb5e809b78b5e027b0bc25e0cb3604d7872d0664b76ec61c93118ec5f43141a708eb7fd9b20272abe3dedbb35f71e55046c5b344377afd9121b41f3bf790d

    • SSDEEP

      1536:snAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxb:sGs8cd8eXlYairZYqMddH13b

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks