Overview

overview

10

Static

static

3

facc8a9019...5a.exe

windows7-x64

10

facc8a9019...5a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    facc8a9019a58871c175f23c94e592ee55f7fec7b154e4eab8602a35d67f9d5a

  • Size

    96KB

  • Sample

    250118-qm6r1strdv

  • MD5

    2b3bf1308b7e79ef933b3d2592048f90

  • SHA1

    387d9d6b78e9aa6fef3ddc5d08962a0c6711526c

  • SHA256

    facc8a9019a58871c175f23c94e592ee55f7fec7b154e4eab8602a35d67f9d5a

  • SHA512

    3f86081d595862dd03a97f01ee65d25a5ab22f402edf98257060d398632efabdcbc0ad378b149d5dfd71fc98b70f4f43fd2faafafa6e5f4810722ac31b2ff25b

  • SSDEEP

    1536:vnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:vGs8cd8eXlYairZYqMddH13L

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      facc8a9019a58871c175f23c94e592ee55f7fec7b154e4eab8602a35d67f9d5a

    • Size

      96KB

    • MD5

      2b3bf1308b7e79ef933b3d2592048f90

    • SHA1

      387d9d6b78e9aa6fef3ddc5d08962a0c6711526c

    • SHA256

      facc8a9019a58871c175f23c94e592ee55f7fec7b154e4eab8602a35d67f9d5a

    • SHA512

      3f86081d595862dd03a97f01ee65d25a5ab22f402edf98257060d398632efabdcbc0ad378b149d5dfd71fc98b70f4f43fd2faafafa6e5f4810722ac31b2ff25b

    • SSDEEP

      1536:vnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:vGs8cd8eXlYairZYqMddH13L

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks