General

  • Target

    e537f82853fc38f40be7ca49f70d9245cff7493d16cdc0be2e86a06e0bd00529N.exe

  • Size

    76KB

  • Sample

    241119-lvma5atmcz

  • MD5

    00d16930a144917507707786dc2bbc30

  • SHA1

    be02807b052fb45288482b5eaf5e67ba6114690a

  • SHA256

    e537f82853fc38f40be7ca49f70d9245cff7493d16cdc0be2e86a06e0bd00529

  • SHA512

    b55eaa36e1e14fc61b909720f82da9c8aa243cf25d7111b7a21d4700bc59d09f3e8e8b0168ee52d20f71a0b206519cdd3b3965cff2f26e52dd3671279edfb676

  • SSDEEP

    768:3MEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAW:3bIvYvZEyFKF6N4yS+AQmZTl/5O

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      e537f82853fc38f40be7ca49f70d9245cff7493d16cdc0be2e86a06e0bd00529N.exe

    • Size

      76KB

    • MD5

      00d16930a144917507707786dc2bbc30

    • SHA1

      be02807b052fb45288482b5eaf5e67ba6114690a

    • SHA256

      e537f82853fc38f40be7ca49f70d9245cff7493d16cdc0be2e86a06e0bd00529

    • SHA512

      b55eaa36e1e14fc61b909720f82da9c8aa243cf25d7111b7a21d4700bc59d09f3e8e8b0168ee52d20f71a0b206519cdd3b3965cff2f26e52dd3671279edfb676

    • SSDEEP

      768:3MEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAW:3bIvYvZEyFKF6N4yS+AQmZTl/5O

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks