Overview

overview

10

Static

static

3

2025-04-06...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-04-06_f44a9d1fee0acdd0b45f6954374b4449_amadey_rhadamanthys_smoke-loader

  • Size

    134KB

  • Sample

    250406-vntw3awrs4

  • MD5

    f44a9d1fee0acdd0b45f6954374b4449

  • SHA1

    8cac9ba608c56a05db3b1f22a92e91291633a80f

  • SHA256

    5395db5ee6c99c19f231a88dbfb6bf73510c4ca908f2e54a673500f67ea7f6b2

  • SHA512

    3e6e62705e59a1c789b4bdf5edc2c421fb3d8f4c30d017633b52a2810c9694af77529bc18279b6e0954578d7519595faed4498e7c8e55ee17726734d2d32afb7

  • SSDEEP

    1536:GDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCiV:4iRTeH0iqAW6J6f1tqF6dngNmaZCiaI

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      2025-04-06_f44a9d1fee0acdd0b45f6954374b4449_amadey_rhadamanthys_smoke-loader

    • Size

      134KB

    • MD5

      f44a9d1fee0acdd0b45f6954374b4449

    • SHA1

      8cac9ba608c56a05db3b1f22a92e91291633a80f

    • SHA256

      5395db5ee6c99c19f231a88dbfb6bf73510c4ca908f2e54a673500f67ea7f6b2

    • SHA512

      3e6e62705e59a1c789b4bdf5edc2c421fb3d8f4c30d017633b52a2810c9694af77529bc18279b6e0954578d7519595faed4498e7c8e55ee17726734d2d32afb7

    • SSDEEP

      1536:GDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCiV:4iRTeH0iqAW6J6f1tqF6dngNmaZCiaI

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks