Overview

overview

10

Static

static

3

073f024fb1...6N.exe

windows7-x64

10

073f024fb1...6N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    073f024fb1923ce0297162adcfcfa2b22d568513f6942fc5a2ea5bea2885fb66N.exe

  • Size

    96KB

  • Sample

    250122-n1qa3svmfx

  • MD5

    cd9bbefa014cd325ab8772ae0d20a370

  • SHA1

    4ffd6ac0bd71f2fc8bbaa3e690ff7ed1344a28a2

  • SHA256

    073f024fb1923ce0297162adcfcfa2b22d568513f6942fc5a2ea5bea2885fb66

  • SHA512

    69a56700f19f7298cf0ad599c3b4641548861e3d8d746b2043c0cc0c3a12e148b389b7a02045509e906b9bf718761b1b25367de47172665cf225e371afbf3327

  • SSDEEP

    1536:HnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:HGs8cd8eXlYairZYqMddH13L

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      073f024fb1923ce0297162adcfcfa2b22d568513f6942fc5a2ea5bea2885fb66N.exe

    • Size

      96KB

    • MD5

      cd9bbefa014cd325ab8772ae0d20a370

    • SHA1

      4ffd6ac0bd71f2fc8bbaa3e690ff7ed1344a28a2

    • SHA256

      073f024fb1923ce0297162adcfcfa2b22d568513f6942fc5a2ea5bea2885fb66

    • SHA512

      69a56700f19f7298cf0ad599c3b4641548861e3d8d746b2043c0cc0c3a12e148b389b7a02045509e906b9bf718761b1b25367de47172665cf225e371afbf3327

    • SSDEEP

      1536:HnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:HGs8cd8eXlYairZYqMddH13L

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks