Overview

overview

10

Static

static

3

e2519ee3a9...4b.exe

windows7-x64

10

e2519ee3a9...4b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e2519ee3a9ed407b11c28a935143d8a6e32ccfcc84fcfd852ed1f1d159922b4b.exe

  • Size

    96KB

  • Sample

    250124-lr9x1stmdn

  • MD5

    5926bd31f01b5ab1dff5b50fb17fd258

  • SHA1

    a7a226bdb5002d78cfaeb3abe81a5a184276d420

  • SHA256

    e2519ee3a9ed407b11c28a935143d8a6e32ccfcc84fcfd852ed1f1d159922b4b

  • SHA512

    dedaaf27db851e090759482f379262bed17a8515e90b2c241058483d5b0077ed4a278a61b90728227dbeba5e2c0a1a51104205ce9a008dca84e82e9708f06d8b

  • SSDEEP

    1536:DnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxp:DGs8cd8eXlYairZYqMddH13p

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      e2519ee3a9ed407b11c28a935143d8a6e32ccfcc84fcfd852ed1f1d159922b4b.exe

    • Size

      96KB

    • MD5

      5926bd31f01b5ab1dff5b50fb17fd258

    • SHA1

      a7a226bdb5002d78cfaeb3abe81a5a184276d420

    • SHA256

      e2519ee3a9ed407b11c28a935143d8a6e32ccfcc84fcfd852ed1f1d159922b4b

    • SHA512

      dedaaf27db851e090759482f379262bed17a8515e90b2c241058483d5b0077ed4a278a61b90728227dbeba5e2c0a1a51104205ce9a008dca84e82e9708f06d8b

    • SSDEEP

      1536:DnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxp:DGs8cd8eXlYairZYqMddH13p

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks