Overview

overview

10

Static

static

3

3faa574172...3N.exe

windows7-x64

10

3faa574172...3N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3faa574172a19eba7bdc738abb42ec4a8b35cdc107394872e3026ab366dfc0c3N.exe

  • Size

    96KB

  • Sample

    250122-nsqxmsvqbj

  • MD5

    a81d20fbc59985a3b7db87bbfaee5fe0

  • SHA1

    8b7cbd78491f5dbc93c912a7464a9d3baff85ba6

  • SHA256

    3faa574172a19eba7bdc738abb42ec4a8b35cdc107394872e3026ab366dfc0c3

  • SHA512

    035f5e0ef094134c32f47754d3692f36ea88f9ff54c77cdd17c4bef0281b000edf3b5c3d949e00ccb3d0e26b8566114a87ab4590cb8edc6d5a48a301f1f64128

  • SSDEEP

    1536:GnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxb:GGs8cd8eXlYairZYqMddH13b

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      3faa574172a19eba7bdc738abb42ec4a8b35cdc107394872e3026ab366dfc0c3N.exe

    • Size

      96KB

    • MD5

      a81d20fbc59985a3b7db87bbfaee5fe0

    • SHA1

      8b7cbd78491f5dbc93c912a7464a9d3baff85ba6

    • SHA256

      3faa574172a19eba7bdc738abb42ec4a8b35cdc107394872e3026ab366dfc0c3

    • SHA512

      035f5e0ef094134c32f47754d3692f36ea88f9ff54c77cdd17c4bef0281b000edf3b5c3d949e00ccb3d0e26b8566114a87ab4590cb8edc6d5a48a301f1f64128

    • SSDEEP

      1536:GnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxb:GGs8cd8eXlYairZYqMddH13b

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks