General

  • Target

    e1acc146ab0852f6b2c5128e944e8fc0_NeikiAnalytics

  • Size

    84KB

  • Sample

    240516-rl2x4sgf2x

  • MD5

    e1acc146ab0852f6b2c5128e944e8fc0

  • SHA1

    cf98c348e6f6132581a26713ede8c6bd0a54d5d3

  • SHA256

    a80086422dcda28b32344d311800632c25a092cf05fe44dac793c91137ca23d5

  • SHA512

    27792e91d93fa03f400a2876331db9a96203638ae9036408f5a24caed0f4086bcb934ecdce6298a0b40be7e76019bfe097f96242d8edf4fa28ecca2ca206c807

  • SSDEEP

    1536:Bd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:xdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      e1acc146ab0852f6b2c5128e944e8fc0_NeikiAnalytics

    • Size

      84KB

    • MD5

      e1acc146ab0852f6b2c5128e944e8fc0

    • SHA1

      cf98c348e6f6132581a26713ede8c6bd0a54d5d3

    • SHA256

      a80086422dcda28b32344d311800632c25a092cf05fe44dac793c91137ca23d5

    • SHA512

      27792e91d93fa03f400a2876331db9a96203638ae9036408f5a24caed0f4086bcb934ecdce6298a0b40be7e76019bfe097f96242d8edf4fa28ecca2ca206c807

    • SSDEEP

      1536:Bd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:xdseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks