General

  • Target

    8f5ff3505538f766b322f065d5540790_NeikiAnalytics

  • Size

    92KB

  • Sample

    240514-gtj26adf39

  • MD5

    8f5ff3505538f766b322f065d5540790

  • SHA1

    63009e2b6db4067f389e85a8e5202ca662f24335

  • SHA256

    740973960361dcd336f0539dd55eb5003d8b7b014e72460b5a164cfb7eed5a2b

  • SHA512

    570d880f01ceb3a4d30399ac0f8e49275fc171254889704b53d04a49569bd46b90194686fe9fd95b4220515b86de6091ed697b8f86d3f60b716034b27ad16655

  • SSDEEP

    1536:gd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5:AdseIOyEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      8f5ff3505538f766b322f065d5540790_NeikiAnalytics

    • Size

      92KB

    • MD5

      8f5ff3505538f766b322f065d5540790

    • SHA1

      63009e2b6db4067f389e85a8e5202ca662f24335

    • SHA256

      740973960361dcd336f0539dd55eb5003d8b7b014e72460b5a164cfb7eed5a2b

    • SHA512

      570d880f01ceb3a4d30399ac0f8e49275fc171254889704b53d04a49569bd46b90194686fe9fd95b4220515b86de6091ed697b8f86d3f60b716034b27ad16655

    • SSDEEP

      1536:gd9dseIOcEr3bIvYvZEyF4EEOF6N4yS+AQmZTl/5:AdseIOyEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks