Overview

overview

10

Static

static

3

09eb2a6f05...bN.exe

windows7-x64

10

09eb2a6f05...bN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    09eb2a6f05510dd24d687fb32eacf0fe455f562f4fc8c7ba152e864b746706abN.exe

  • Size

    96KB

  • Sample

    250201-t8y6vasrcm

  • MD5

    b55545b8ebbe3b5559e4615778d5a610

  • SHA1

    4cad156ecebb8a3a88947778e279386b68685260

  • SHA256

    09eb2a6f05510dd24d687fb32eacf0fe455f562f4fc8c7ba152e864b746706ab

  • SHA512

    28def2b2454383345a82949d9f00d9787036c4ad3ab64d82d7e86c588383e348be7e36d850148bda0c97bf6a3b7d00e530edcbb35c22db14813cf8ad9e0f04e3

  • SSDEEP

    1536:UnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:UGs8cd8eXlYairZYqMddH13L

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      09eb2a6f05510dd24d687fb32eacf0fe455f562f4fc8c7ba152e864b746706abN.exe

    • Size

      96KB

    • MD5

      b55545b8ebbe3b5559e4615778d5a610

    • SHA1

      4cad156ecebb8a3a88947778e279386b68685260

    • SHA256

      09eb2a6f05510dd24d687fb32eacf0fe455f562f4fc8c7ba152e864b746706ab

    • SHA512

      28def2b2454383345a82949d9f00d9787036c4ad3ab64d82d7e86c588383e348be7e36d850148bda0c97bf6a3b7d00e530edcbb35c22db14813cf8ad9e0f04e3

    • SSDEEP

      1536:UnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:UGs8cd8eXlYairZYqMddH13L

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks