General

  • Target

    4a79bc1c5683752f886e0214228d0c20_NeikiAnalytics.exe

  • Size

    84KB

  • Sample

    240519-b8tl9acb8x

  • MD5

    4a79bc1c5683752f886e0214228d0c20

  • SHA1

    ad06cd8cdf0e9d725ba37a74416b32388fe6fd14

  • SHA256

    2d1b8de1feb9a71297ab7a3286703e6cf1bcac0c22e4cc1fd3023616d9737778

  • SHA512

    d0ea7ff5e0e0ce3079cdeab3027b7e0e6269d8d01211b77ba09b2b131566fdc801d08d053b6281ce4c00859017789aaae733ad24bd3be3b6a673724059d7bf6f

  • SSDEEP

    768:DMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:DbIvYvZEyFKF6N4yS+AQmZTl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      4a79bc1c5683752f886e0214228d0c20_NeikiAnalytics.exe

    • Size

      84KB

    • MD5

      4a79bc1c5683752f886e0214228d0c20

    • SHA1

      ad06cd8cdf0e9d725ba37a74416b32388fe6fd14

    • SHA256

      2d1b8de1feb9a71297ab7a3286703e6cf1bcac0c22e4cc1fd3023616d9737778

    • SHA512

      d0ea7ff5e0e0ce3079cdeab3027b7e0e6269d8d01211b77ba09b2b131566fdc801d08d053b6281ce4c00859017789aaae733ad24bd3be3b6a673724059d7bf6f

    • SSDEEP

      768:DMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:DbIvYvZEyFKF6N4yS+AQmZTl/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks