Extracted

• • Target

    fa56961b48e7ba2578f326887e0176839bab9902206aada37ac52e3e6e5b9a6d.exe

  • Size

    96KB

  • MD5

    2826b860fc6bac4ca0d1e95ad384c4cc

  • SHA1

    e2bf5d6457d0b36bd39b95d245bf2e5fbe59accd

  • SHA256

    fa56961b48e7ba2578f326887e0176839bab9902206aada37ac52e3e6e5b9a6d

  • SHA512

    04d02a50817f5d2ac54ac90a5645e3c171d5b2eaff00b8f863a03ee3fbfbb2ecc838c67d21358d40a1e133b7b578e9811a43c5c237dd6dcbd9d3867d7e59a565

  • SSDEEP

    1536:GnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxR:GGs8cd8eXlYairZYqMddH13R

  Score

  10^/10

  neconyddiscoverytrojan

  • Neconyd

    Neconyd is a trojan written in C++.

    trojanneconyd

  • Neconyd family

    neconyd

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  • Suspicious use of SetThreadContext

  behavioral1behavioral2