General

  • Target

    848d7323ff8f14e37cb1f58bc5fca2b0_NeikiAnalytics

  • Size

    65KB

  • Sample

    240516-danpfsha6s

  • MD5

    848d7323ff8f14e37cb1f58bc5fca2b0

  • SHA1

    71bff5e7817c0b117100ca2cc0b9884ede310641

  • SHA256

    81de26862a342c6ea1d2a3fdd35a1825191b9fde9dffaa0eac671e84d3e7fd2d

  • SHA512

    f77332e854305fe145e9da9cef8667883aaa52b48ab84038aca202f3e67ae44e4d44597a3fe0e2bdd526466a294031763ff531dff9c2da38f4111f2d21f95354

  • SSDEEP

    1536:id9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZcl/5:SdseIO+EZEyFjEOFqTiQmOl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      848d7323ff8f14e37cb1f58bc5fca2b0_NeikiAnalytics

    • Size

      65KB

    • MD5

      848d7323ff8f14e37cb1f58bc5fca2b0

    • SHA1

      71bff5e7817c0b117100ca2cc0b9884ede310641

    • SHA256

      81de26862a342c6ea1d2a3fdd35a1825191b9fde9dffaa0eac671e84d3e7fd2d

    • SHA512

      f77332e854305fe145e9da9cef8667883aaa52b48ab84038aca202f3e67ae44e4d44597a3fe0e2bdd526466a294031763ff531dff9c2da38f4111f2d21f95354

    • SSDEEP

      1536:id9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZcl/5:SdseIO+EZEyFjEOFqTiQmOl/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks