Overview

overview

10

Static

static

3

a20d8d15be...3N.exe

windows7-x64

10

a20d8d15be...3N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a20d8d15be6fd148f7481b57a9bcb9ee877eca2d85be64394e149d4e39769203N.exe

  • Size

    134KB

  • Sample

    250201-z64ansspek

  • MD5

    f4be90352975039dc08cb4cfff1ab390

  • SHA1

    e9e7d4d0d1f8da90d7748a18b21a6d2a579d9f2b

  • SHA256

    a20d8d15be6fd148f7481b57a9bcb9ee877eca2d85be64394e149d4e39769203

  • SHA512

    5bb9afc5872978bcfbdecf0997e54d1b8a091e3941e83a59164d4124d7c7ee48b68ac3814eb336c5226761f35965ecf413ec0d51a6d8a2c173c297b3db85fc2f

  • SSDEEP

    1536:MDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCid:yiRTeH0iqAW6J6f1tqF6dngNmaZCiaI

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      a20d8d15be6fd148f7481b57a9bcb9ee877eca2d85be64394e149d4e39769203N.exe

    • Size

      134KB

    • MD5

      f4be90352975039dc08cb4cfff1ab390

    • SHA1

      e9e7d4d0d1f8da90d7748a18b21a6d2a579d9f2b

    • SHA256

      a20d8d15be6fd148f7481b57a9bcb9ee877eca2d85be64394e149d4e39769203

    • SHA512

      5bb9afc5872978bcfbdecf0997e54d1b8a091e3941e83a59164d4124d7c7ee48b68ac3814eb336c5226761f35965ecf413ec0d51a6d8a2c173c297b3db85fc2f

    • SSDEEP

      1536:MDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCid:yiRTeH0iqAW6J6f1tqF6dngNmaZCiaI

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks