Overview

overview

10

Static

static

10

edf488c479...01.exe

windows7-x64

10

edf488c479...01.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    edf488c4795085062845f8567de05af31fd6c98e2e24a5731f8720d532e60101.exe

  • Size

    90KB

  • Sample

    241201-prg4sawkfk

  • MD5

    7225501dce03ee74bf0ba723ed7346ac

  • SHA1

    dc7c4cd0bf0826efa63e01b4b663f78b6f4c53c7

  • SHA256

    edf488c4795085062845f8567de05af31fd6c98e2e24a5731f8720d532e60101

  • SHA512

    55efa03667d29ebeae85e02f98266b40070fe759a36ea8baa3074d319967f9df695359ce917fce13e88de2189c890fe85dd5bb56f6d168eb89fdf3ad652e8ef5

  • SSDEEP

    768:NMEIvFGvZEr8LFK0ic46N4zeSdPAHwmZGp6JXXlaa5uA+:NbIvYvZEyFKF6N4aS5AQmZTl/5W

Score
10/10
neconyddiscoverytrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      edf488c4795085062845f8567de05af31fd6c98e2e24a5731f8720d532e60101.exe

    • Size

      90KB

    • MD5

      7225501dce03ee74bf0ba723ed7346ac

    • SHA1

      dc7c4cd0bf0826efa63e01b4b663f78b6f4c53c7

    • SHA256

      edf488c4795085062845f8567de05af31fd6c98e2e24a5731f8720d532e60101

    • SHA512

      55efa03667d29ebeae85e02f98266b40070fe759a36ea8baa3074d319967f9df695359ce917fce13e88de2189c890fe85dd5bb56f6d168eb89fdf3ad652e8ef5

    • SSDEEP

      768:NMEIvFGvZEr8LFK0ic46N4zeSdPAHwmZGp6JXXlaa5uA+:NbIvYvZEyFKF6N4aS5AQmZTl/5W

    Score
    10/10
    neconyddiscoverytrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Neconyd family

      neconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks