General

  • Target

    de86bcecd5ab117c9ddb8d6656cd2c20_NeikiAnalytics

  • Size

    89KB

  • Sample

    240516-pnkqhada78

  • MD5

    de86bcecd5ab117c9ddb8d6656cd2c20

  • SHA1

    a6c5feb3548f464de304ede65e05f951135462b8

  • SHA256

    4f8eab55c185ced3aec2de348aec9026a3ae9d2b07a7086cd87225e4d20e3387

  • SHA512

    87888d11431b6647bcb3e80c84e37fcb3193a7fbcc524f7af45306484fa91d697577635fe050d29f5720bb976741f72c2ff25f125ddc50f26a0d9764a44d4185

  • SSDEEP

    768:ZMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:ZbIvYvZEyFKF6N4yS+AQmZTl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      de86bcecd5ab117c9ddb8d6656cd2c20_NeikiAnalytics

    • Size

      89KB

    • MD5

      de86bcecd5ab117c9ddb8d6656cd2c20

    • SHA1

      a6c5feb3548f464de304ede65e05f951135462b8

    • SHA256

      4f8eab55c185ced3aec2de348aec9026a3ae9d2b07a7086cd87225e4d20e3387

    • SHA512

      87888d11431b6647bcb3e80c84e37fcb3193a7fbcc524f7af45306484fa91d697577635fe050d29f5720bb976741f72c2ff25f125ddc50f26a0d9764a44d4185

    • SSDEEP

      768:ZMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:ZbIvYvZEyFKF6N4yS+AQmZTl/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks