Overview

overview

10

Static

static

3

46e5bf4cc0...aN.exe

windows7-x64

10

46e5bf4cc0...aN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    46e5bf4cc094c32ab551be8c442a5973bc9d6b68bb7fe5041e051f6460f6609aN.exe

  • Size

    96KB

  • Sample

    250201-sd4x6sxkev

  • MD5

    5a4e24466068994c8d2993885c234630

  • SHA1

    71ad823076f84943e7a84b18170620604c222816

  • SHA256

    46e5bf4cc094c32ab551be8c442a5973bc9d6b68bb7fe5041e051f6460f6609a

  • SHA512

    e63ba08d8b70e3fb81ec7556f9210600964a633a7920579fe9bbff0bca370b83b88e5abab7ee1910db82caa929787109b4138b02af9f7ff9f199e957641ce07b

  • SSDEEP

    1536:OnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxB:OGs8cd8eXlYairZYqMddH13B

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      46e5bf4cc094c32ab551be8c442a5973bc9d6b68bb7fe5041e051f6460f6609aN.exe

    • Size

      96KB

    • MD5

      5a4e24466068994c8d2993885c234630

    • SHA1

      71ad823076f84943e7a84b18170620604c222816

    • SHA256

      46e5bf4cc094c32ab551be8c442a5973bc9d6b68bb7fe5041e051f6460f6609a

    • SHA512

      e63ba08d8b70e3fb81ec7556f9210600964a633a7920579fe9bbff0bca370b83b88e5abab7ee1910db82caa929787109b4138b02af9f7ff9f199e957641ce07b

    • SSDEEP

      1536:OnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxB:OGs8cd8eXlYairZYqMddH13B

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks