Extracted

• • Target

    196f443fd6abeb561100985d1c5e4be4066beb0344ac8ce4cfaefae881c77432.exe

  • Size

    96KB

  • MD5

    a8c0fcc2af31901e2a529fc64ae8cc81

  • SHA1

    29b1dc02e111ef01c0963f650d9436cd0f0d4278

  • SHA256

    196f443fd6abeb561100985d1c5e4be4066beb0344ac8ce4cfaefae881c77432

  • SHA512

    ac1486b5db71b9a3f56ee88e6321f595649691adc9c62908ba870f96a3fac47306685216696a31b422f8cf1e0e60d36dbff764ce5ab0a93dfaf4f0f7f0894c51

  • SSDEEP

    1536:GnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxb:GGs8cd8eXlYairZYqMddH13b

  Score

  10^/10

  neconyddiscoverytrojan

  • Neconyd

    Neconyd is a trojan written in C++.

    trojanneconyd

  • Neconyd family

    neconyd

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  • Suspicious use of SetThreadContext

  behavioral1behavioral2