Extracted

• • Target

    d998c3692501dd8efb02f7286e8f7d6d6d424e8ccc1ae0523796c1256d23fcb2.exe

  • Size

    96KB

  • MD5

    78a061fad4189f343fcecc7875495c0c

  • SHA1

    7103bafd20528fe2c8bc3aa252fb1f0fdf00d90d

  • SHA256

    d998c3692501dd8efb02f7286e8f7d6d6d424e8ccc1ae0523796c1256d23fcb2

  • SHA512

    954ff5b8eb6996f0d61a26bf2ac07475dd2e1d66989c0afd658ef59baba0c54578461701fdb3bf2360665426970cd39e7b761fa3c07413bfd53323750ea83345

  • SSDEEP

    1536:OnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxR:OGs8cd8eXlYairZYqMddH13R

  Score

  10^/10

  neconyddiscoverytrojan

  • Neconyd

    Neconyd is a trojan written in C++.

    trojanneconyd

  • Neconyd family

    neconyd

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  • Suspicious use of SetThreadContext

  behavioral1behavioral2