Overview

overview

10

Static

static

3

24a4f08f85...01.exe

windows7-x64

10

24a4f08f85...01.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    24a4f08f8568585eb049849288a3c0f33f1fc6ef92b4d679410238e51f284601

  • Size

    96KB

  • Sample

    250204-zjqfas1pev

  • MD5

    927a6a54399c59df9014b46a0e8aa4b7

  • SHA1

    ec20d79bce06eed76bb0314eddc6eb411e08ed97

  • SHA256

    24a4f08f8568585eb049849288a3c0f33f1fc6ef92b4d679410238e51f284601

  • SHA512

    9c37684f8f52ba02bb8b4ab9b7391f3dbbf0bab427a624a152d6f73590c5b2804d407a6081a476f4de9b995140bcfe641b000c193cddf4bef7e7e200622eb805

  • SSDEEP

    1536:qnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:qGs8cd8eXlYairZYqMddH13L

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      24a4f08f8568585eb049849288a3c0f33f1fc6ef92b4d679410238e51f284601

    • Size

      96KB

    • MD5

      927a6a54399c59df9014b46a0e8aa4b7

    • SHA1

      ec20d79bce06eed76bb0314eddc6eb411e08ed97

    • SHA256

      24a4f08f8568585eb049849288a3c0f33f1fc6ef92b4d679410238e51f284601

    • SHA512

      9c37684f8f52ba02bb8b4ab9b7391f3dbbf0bab427a624a152d6f73590c5b2804d407a6081a476f4de9b995140bcfe641b000c193cddf4bef7e7e200622eb805

    • SSDEEP

      1536:qnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:qGs8cd8eXlYairZYqMddH13L

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks