Overview

overview

10

Static

static

3

955506e8b5...fb.exe

windows7-x64

10

955506e8b5...fb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    955506e8b5aef5a80a6efcd666830fb3cd0fe1e81dfd5e67d6e7c502f17c78fb

  • Size

    134KB

  • Sample

    250222-e77z2aymfl

  • MD5

    3effbb560b77728a51bba0802066dd9a

  • SHA1

    f504352b945c9582f43a398c9506ddfd56ab4b89

  • SHA256

    955506e8b5aef5a80a6efcd666830fb3cd0fe1e81dfd5e67d6e7c502f17c78fb

  • SHA512

    a43176308084c36701782dd7223477364fa6e639c4bcf27d7b99e37383d81ddce86d623eabc89ee59e008494874609c3b91799432800eff2ee81d2ccfb0393f9

  • SSDEEP

    1536:pDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCiH:ZiRTeH0iqAW6J6f1tqF6dngNmaZCiaI

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      955506e8b5aef5a80a6efcd666830fb3cd0fe1e81dfd5e67d6e7c502f17c78fb

    • Size

      134KB

    • MD5

      3effbb560b77728a51bba0802066dd9a

    • SHA1

      f504352b945c9582f43a398c9506ddfd56ab4b89

    • SHA256

      955506e8b5aef5a80a6efcd666830fb3cd0fe1e81dfd5e67d6e7c502f17c78fb

    • SHA512

      a43176308084c36701782dd7223477364fa6e639c4bcf27d7b99e37383d81ddce86d623eabc89ee59e008494874609c3b91799432800eff2ee81d2ccfb0393f9

    • SSDEEP

      1536:pDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCiH:ZiRTeH0iqAW6J6f1tqF6dngNmaZCiaI

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks