Overview

overview

10

Static

static

3

8f9006f7a9...d9.exe

windows7-x64

10

8f9006f7a9...d9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8f9006f7a9e06b1e6b6d1781f5beb5c836f9c079b3f1197109b101090921ecd9.exe

  • Size

    96KB

  • Sample

    250205-n8wstsxjhq

  • MD5

    20f598dc0670e96b74bbb6459acecb7a

  • SHA1

    0b5408761377fc586bab392f277ccb345b863e31

  • SHA256

    8f9006f7a9e06b1e6b6d1781f5beb5c836f9c079b3f1197109b101090921ecd9

  • SHA512

    66205064f7ce794dc7fdd0fa58b128f411be9505203bb504b340ededd06f3e00df37732affd3ae2fc9609f1ee9b69440aaa52e8f9908d7d26c7bf0572505b7af

  • SSDEEP

    1536:pnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxT:pGs8cd8eXlYairZYqMddH13T

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      8f9006f7a9e06b1e6b6d1781f5beb5c836f9c079b3f1197109b101090921ecd9.exe

    • Size

      96KB

    • MD5

      20f598dc0670e96b74bbb6459acecb7a

    • SHA1

      0b5408761377fc586bab392f277ccb345b863e31

    • SHA256

      8f9006f7a9e06b1e6b6d1781f5beb5c836f9c079b3f1197109b101090921ecd9

    • SHA512

      66205064f7ce794dc7fdd0fa58b128f411be9505203bb504b340ededd06f3e00df37732affd3ae2fc9609f1ee9b69440aaa52e8f9908d7d26c7bf0572505b7af

    • SSDEEP

      1536:pnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxT:pGs8cd8eXlYairZYqMddH13T

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks