General

  • Target

    b4cbb5c95840d823fb4b88156b32efe0_NeikiAnalytics

  • Size

    64KB

  • Sample

    240515-kw1dpsab66

  • MD5

    b4cbb5c95840d823fb4b88156b32efe0

  • SHA1

    b0f5c57383541eb80a00df66870d4b92ca596079

  • SHA256

    cf58accd6d37a98df17bf4035371c41cc68e25956d4d9d7ca9ad9a39de82f9d1

  • SHA512

    877d524b269c3c584ee4ff4d2275c40a0f65c66f23053e1eb0f893fd9223e3fced989fc0bf911ee4d909287bf7ce21745938bc668a49ab6a52d83d9a02bc7a84

  • SSDEEP

    768:uMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uA:ubIvYvZEyFKF6N4yS+AQmZcl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      b4cbb5c95840d823fb4b88156b32efe0_NeikiAnalytics

    • Size

      64KB

    • MD5

      b4cbb5c95840d823fb4b88156b32efe0

    • SHA1

      b0f5c57383541eb80a00df66870d4b92ca596079

    • SHA256

      cf58accd6d37a98df17bf4035371c41cc68e25956d4d9d7ca9ad9a39de82f9d1

    • SHA512

      877d524b269c3c584ee4ff4d2275c40a0f65c66f23053e1eb0f893fd9223e3fced989fc0bf911ee4d909287bf7ce21745938bc668a49ab6a52d83d9a02bc7a84

    • SSDEEP

      768:uMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uA:ubIvYvZEyFKF6N4yS+AQmZcl/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks