Extracted

• • Target

    16d34620936301f3100dd99654031866364b4f10debc78694aaa477e01103a73

  • Size

    96KB

  • MD5

    9bc358419f7b5bb5a953c325eb5e452a

  • SHA1

    0f28a48d670a8e1dd5dd9594a8a575e0ec72b66a

  • SHA256

    16d34620936301f3100dd99654031866364b4f10debc78694aaa477e01103a73

  • SHA512

    9ed8245bcb888d61605e9bc38ab450533101c56fd911f62aaad79e969d1061ade9f6fa276e4710943dd24f22b08bb391c5cce8ede55ae3f4aecb18415b98f64a

  • SSDEEP

    1536:CnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxb:CGs8cd8eXlYairZYqMddH13b

  Score

  10^/10

  neconyddiscoverytrojan

  • Neconyd

    Neconyd is a trojan written in C++.

    trojanneconyd

  • Neconyd family

    neconyd

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  • Suspicious use of SetThreadContext

  behavioral1behavioral2