Overview

overview

10

Static

static

10

e8eaf2fb65...7N.exe

windows7-x64

10

e8eaf2fb65...7N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e8eaf2fb655d8059030acc99c5d283d97a8e2565404c4af6ded877135328a557N.exe

  • Size

    72KB

  • Sample

    250117-r37jxssqak

  • MD5

    8a86f6907e31ff1e142f7ad6150c7bb0

  • SHA1

    acb56477351906d3cd1e19c34ca5dfa5af6edb16

  • SHA256

    e8eaf2fb655d8059030acc99c5d283d97a8e2565404c4af6ded877135328a557

  • SHA512

    70c90ef4a7b025473e4f9a31f6efa770b04679439bcf13a17dec1e3d7080e933ac7fdb11f9831300021f5a48d4db67bb89bff383b229cb2ba7a87d6f4ae363c5

  • SSDEEP

    1536:Ld9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211t:7dseIOMEZEyFjEOFqTiQm5l/5211t

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      e8eaf2fb655d8059030acc99c5d283d97a8e2565404c4af6ded877135328a557N.exe

    • Size

      72KB

    • MD5

      8a86f6907e31ff1e142f7ad6150c7bb0

    • SHA1

      acb56477351906d3cd1e19c34ca5dfa5af6edb16

    • SHA256

      e8eaf2fb655d8059030acc99c5d283d97a8e2565404c4af6ded877135328a557

    • SHA512

      70c90ef4a7b025473e4f9a31f6efa770b04679439bcf13a17dec1e3d7080e933ac7fdb11f9831300021f5a48d4db67bb89bff383b229cb2ba7a87d6f4ae363c5

    • SSDEEP

      1536:Ld9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211t:7dseIOMEZEyFjEOFqTiQm5l/5211t

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks