Overview

overview

10

Static

static

3

4ce74e17a4...e8.exe

windows7-x64

10

4ce74e17a4...e8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ce74e17a4e2520215895f43013ead5e175d7c9b4cced4a049b138ffeee76ae8.exe

  • Size

    96KB

  • Sample

    250120-zwty9aypgj

  • MD5

    e2939dea0aa94c39dbb06764957afc50

  • SHA1

    1477cd7cd57d035e2dcd857ebcd89d5b622d4a5f

  • SHA256

    4ce74e17a4e2520215895f43013ead5e175d7c9b4cced4a049b138ffeee76ae8

  • SHA512

    da3b7e541fc7fbf3a6c468eb0b8b8faf999a9247daadc28746941b7d979d3868ccd011c9794f5bcd858f271e9be53b37f8bdb4d1c84f644a38218cf0593e4eeb

  • SSDEEP

    1536:CnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxb:CGs8cd8eXlYairZYqMddH13b

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      4ce74e17a4e2520215895f43013ead5e175d7c9b4cced4a049b138ffeee76ae8.exe

    • Size

      96KB

    • MD5

      e2939dea0aa94c39dbb06764957afc50

    • SHA1

      1477cd7cd57d035e2dcd857ebcd89d5b622d4a5f

    • SHA256

      4ce74e17a4e2520215895f43013ead5e175d7c9b4cced4a049b138ffeee76ae8

    • SHA512

      da3b7e541fc7fbf3a6c468eb0b8b8faf999a9247daadc28746941b7d979d3868ccd011c9794f5bcd858f271e9be53b37f8bdb4d1c84f644a38218cf0593e4eeb

    • SSDEEP

      1536:CnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxb:CGs8cd8eXlYairZYqMddH13b

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks