Overview

overview

10

Static

static

3

12117f04b4...c8.exe

windows7-x64

10

12117f04b4...c8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    12117f04b48753d9af636c7750a9f6b3cc706ad0dd5146de83655834608e30c8.exe

  • Size

    134KB

  • Sample

    250202-p5alvsslfx

  • MD5

    d9b1315c3de54f41e9f25a5070f6c6ca

  • SHA1

    aa709b47beb38f301683cc96eb881df5ea5f4711

  • SHA256

    12117f04b48753d9af636c7750a9f6b3cc706ad0dd5146de83655834608e30c8

  • SHA512

    37cde91b5389a9916223b6695902316010d198ed5a8c32fe70e3a44eb95696669bbcc7b2f8f253dd3e2769a7cf71f67786771153ba99652599a378ce41af02c3

  • SSDEEP

    1536:sDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCit:SiRTeH0iqAW6J6f1tqF6dngNmaZCiaI

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      12117f04b48753d9af636c7750a9f6b3cc706ad0dd5146de83655834608e30c8.exe

    • Size

      134KB

    • MD5

      d9b1315c3de54f41e9f25a5070f6c6ca

    • SHA1

      aa709b47beb38f301683cc96eb881df5ea5f4711

    • SHA256

      12117f04b48753d9af636c7750a9f6b3cc706ad0dd5146de83655834608e30c8

    • SHA512

      37cde91b5389a9916223b6695902316010d198ed5a8c32fe70e3a44eb95696669bbcc7b2f8f253dd3e2769a7cf71f67786771153ba99652599a378ce41af02c3

    • SSDEEP

      1536:sDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCit:SiRTeH0iqAW6J6f1tqF6dngNmaZCiaI

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks