Overview

overview

10

Static

static

10

e98748b8cc...00.exe

windows7-x64

10

e98748b8cc...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e98748b8ccb456573ee361c8e5e437b7b2cb3e0336baa6e161d15564795e0e00.exe

  • Size

    61KB

  • Sample

    241124-qnwcns1ngs

  • MD5

    9b1bd6f85c7c3c12775b80a30f5af5ed

  • SHA1

    02cb3e82153dc7ec331b89e467536d141438ef63

  • SHA256

    e98748b8ccb456573ee361c8e5e437b7b2cb3e0336baa6e161d15564795e0e00

  • SHA512

    b00fcda60ff8a70ff37cb0991d1de5fc993361eb51f3174343499a37944a58952c487d96fb6f7c2155e021f8d2f1b1f714bf4cf48d2c041ccf83a52a9da9f741

  • SSDEEP

    1536:Qd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ4l/5P:QdseIOMEZEyFjEOFqTiQmil/5P

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      e98748b8ccb456573ee361c8e5e437b7b2cb3e0336baa6e161d15564795e0e00.exe

    • Size

      61KB

    • MD5

      9b1bd6f85c7c3c12775b80a30f5af5ed

    • SHA1

      02cb3e82153dc7ec331b89e467536d141438ef63

    • SHA256

      e98748b8ccb456573ee361c8e5e437b7b2cb3e0336baa6e161d15564795e0e00

    • SHA512

      b00fcda60ff8a70ff37cb0991d1de5fc993361eb51f3174343499a37944a58952c487d96fb6f7c2155e021f8d2f1b1f714bf4cf48d2c041ccf83a52a9da9f741

    • SSDEEP

      1536:Qd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZ4l/5P:QdseIOMEZEyFjEOFqTiQmil/5P

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks