Overview

overview

10

Static

static

3

5f23a18472...0d.exe

windows7-x64

10

5f23a18472...0d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5f23a18472141c4108d7cd49ebaa3f58fa3006777922b737202cf7338c8e0d0d.exe

  • Size

    96KB

  • Sample

    250127-tak7bswqbl

  • MD5

    e23e1066967cfe27f0bad4cbab114e0e

  • SHA1

    7f4af7f5b9c2021c553d4bec0915f1ab56c2630b

  • SHA256

    5f23a18472141c4108d7cd49ebaa3f58fa3006777922b737202cf7338c8e0d0d

  • SHA512

    2f5741e0fe892e064024a84b03b9973550dfd86ab1df591f6ad11a6ff25c7333967f8c49b97362998d5ee77b0ec781bdfbada240c1d4f59c5af0ba01f89fe645

  • SSDEEP

    1536:EnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxT:EGs8cd8eXlYairZYqMddH13T

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      5f23a18472141c4108d7cd49ebaa3f58fa3006777922b737202cf7338c8e0d0d.exe

    • Size

      96KB

    • MD5

      e23e1066967cfe27f0bad4cbab114e0e

    • SHA1

      7f4af7f5b9c2021c553d4bec0915f1ab56c2630b

    • SHA256

      5f23a18472141c4108d7cd49ebaa3f58fa3006777922b737202cf7338c8e0d0d

    • SHA512

      2f5741e0fe892e064024a84b03b9973550dfd86ab1df591f6ad11a6ff25c7333967f8c49b97362998d5ee77b0ec781bdfbada240c1d4f59c5af0ba01f89fe645

    • SSDEEP

      1536:EnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxT:EGs8cd8eXlYairZYqMddH13T

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks