Extracted

• • Target

    d48841402fa017d9c240845552cd6aeecf5b4fef96f5d537040a90ae16278ed8.exe

  • Size

    96KB

  • MD5

    51d9102330c347eec39456dfea0e2d58

  • SHA1

    603e97d3c486a8bae37ad8ddfe090d5db138d77e

  • SHA256

    d48841402fa017d9c240845552cd6aeecf5b4fef96f5d537040a90ae16278ed8

  • SHA512

    44690610ebf5a671cad8a667f7f82c0f635fcb9ec2349574c15fe4aa7729e632667eda0b13f781ac1a9cc44d2da7f09b61a04e6ad93df5285aaf0748506ed9a3

  • SSDEEP

    1536:/nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxx:/Gs8cd8eXlYairZYqMddH13x

  Score

  10^/10

  neconyddiscoverytrojan

  • Neconyd

    Neconyd is a trojan written in C++.

    trojanneconyd

  • Neconyd family

    neconyd

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  • Suspicious use of SetThreadContext

  behavioral1behavioral2