Overview

overview

10

Static

static

3

21b0a8040e...64.exe

windows7-x64

10

21b0a8040e...64.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    21b0a8040e39963d792e841b2fe17492e4a9a8b9f962a8241ed1787839832164.exe

  • Size

    96KB

  • Sample

    250119-zhebmswjem

  • MD5

    e07d0b15d4e7503500807aa373df6a6a

  • SHA1

    18e97aed437d6caaf333cd4667a10ed235d30ca7

  • SHA256

    21b0a8040e39963d792e841b2fe17492e4a9a8b9f962a8241ed1787839832164

  • SHA512

    a0786f76b4076de6de00be786f57ff949161189a8b69275813e5b0a68b146c98164c5b785e1f824b701d657d3fbb5e25377805376306cfccbbb4ad3386c150d1

  • SSDEEP

    1536:1nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxr:1Gs8cd8eXlYairZYqMddH13r

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      21b0a8040e39963d792e841b2fe17492e4a9a8b9f962a8241ed1787839832164.exe

    • Size

      96KB

    • MD5

      e07d0b15d4e7503500807aa373df6a6a

    • SHA1

      18e97aed437d6caaf333cd4667a10ed235d30ca7

    • SHA256

      21b0a8040e39963d792e841b2fe17492e4a9a8b9f962a8241ed1787839832164

    • SHA512

      a0786f76b4076de6de00be786f57ff949161189a8b69275813e5b0a68b146c98164c5b785e1f824b701d657d3fbb5e25377805376306cfccbbb4ad3386c150d1

    • SSDEEP

      1536:1nAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxr:1Gs8cd8eXlYairZYqMddH13r

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks