Overview

overview

10

Static

static

3

c0aa6995b5...3N.exe

windows7-x64

10

c0aa6995b5...3N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c0aa6995b5ec91e77fbce0187da9a417c574e160c15bbc6e5c64e7961fd42fb3N.exe

  • Size

    96KB

  • Sample

    250126-1e56mawldn

  • MD5

    db7b422f5b010b0473a544c5014ebfe0

  • SHA1

    d0c3a080ce186aff0c6ca776c3b99d62b53d36ed

  • SHA256

    c0aa6995b5ec91e77fbce0187da9a417c574e160c15bbc6e5c64e7961fd42fb3

  • SHA512

    e319b6c244157ca4438b4bfb4e5e7de807aa56d5c82c241ac89a930144f47f369d39f8e25c7dcfce8eec78fbdf8838f874390a80f685cad0345f345d418d8f14

  • SSDEEP

    1536:jnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxJ:jGs8cd8eXlYairZYqMddH13J

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      c0aa6995b5ec91e77fbce0187da9a417c574e160c15bbc6e5c64e7961fd42fb3N.exe

    • Size

      96KB

    • MD5

      db7b422f5b010b0473a544c5014ebfe0

    • SHA1

      d0c3a080ce186aff0c6ca776c3b99d62b53d36ed

    • SHA256

      c0aa6995b5ec91e77fbce0187da9a417c574e160c15bbc6e5c64e7961fd42fb3

    • SHA512

      e319b6c244157ca4438b4bfb4e5e7de807aa56d5c82c241ac89a930144f47f369d39f8e25c7dcfce8eec78fbdf8838f874390a80f685cad0345f345d418d8f14

    • SSDEEP

      1536:jnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxJ:jGs8cd8eXlYairZYqMddH13J

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks