Overview

overview

10

Static

static

3

2025-04-06...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-04-06_cff9fc8aa25c64c8c64210e0e69d8594_amadey_rhadamanthys_smoke-loader

  • Size

    134KB

  • Sample

    250406-mhyztswxav

  • MD5

    cff9fc8aa25c64c8c64210e0e69d8594

  • SHA1

    b8354fd545725c8da9f3a7026c59a58f4b3420de

  • SHA256

    c9a66c51d5b520d1597e65641c8edc205d68d133432e75c8248a1871b332c23d

  • SHA512

    49308d4151cbabeb576c68f1455fc7afd43349046ecf88a23c6a55a0e981c66f2b807e48703b785ae72eb301506eb5412e5ceab07b2c0e7653d90bea70c9105a

  • SSDEEP

    1536:qDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCiV:MiRTeH0iqAW6J6f1tqF6dngNmaZCiaI

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      2025-04-06_cff9fc8aa25c64c8c64210e0e69d8594_amadey_rhadamanthys_smoke-loader

    • Size

      134KB

    • MD5

      cff9fc8aa25c64c8c64210e0e69d8594

    • SHA1

      b8354fd545725c8da9f3a7026c59a58f4b3420de

    • SHA256

      c9a66c51d5b520d1597e65641c8edc205d68d133432e75c8248a1871b332c23d

    • SHA512

      49308d4151cbabeb576c68f1455fc7afd43349046ecf88a23c6a55a0e981c66f2b807e48703b785ae72eb301506eb5412e5ceab07b2c0e7653d90bea70c9105a

    • SSDEEP

      1536:qDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCiV:MiRTeH0iqAW6J6f1tqF6dngNmaZCiaI

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks