Extracted

• • Target

    c8295a01550f82fec37690d20fb0496f9ba678d0c13d9ecf1cb8ae6f15fada1f

  • Size

    96KB

  • MD5

    248c41cf2ed74592669cc5acbdddb78d

  • SHA1

    25c1568262e4da6dab1b8f6fdb402988ec2c7bce

  • SHA256

    c8295a01550f82fec37690d20fb0496f9ba678d0c13d9ecf1cb8ae6f15fada1f

  • SHA512

    e06f7940fc7c63c7f6c458ba63b1160f73cbfeb297c5f9790029649f0f51450198a28354b1e0d86b0859f1a7cf2d9534f372f3f51a9e22eff21a0b365b54c570

  • SSDEEP

    1536:InAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxz:IGs8cd8eXlYairZYqMddH13z

  Score

  10^/10

  neconyddiscoverytrojan

  • Neconyd

    Neconyd is a trojan written in C++.

    trojanneconyd

  • Neconyd family

    neconyd

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  • Suspicious use of SetThreadContext

  behavioral1behavioral2