General

  • Target

    8f28888a23ae1ff336f468dacf465f70_NeikiAnalytics.exe

  • Size

    76KB

  • Sample

    240519-g3pc8seb99

  • MD5

    8f28888a23ae1ff336f468dacf465f70

  • SHA1

    cfad98988112744610bf47bb54de383151d5cff2

  • SHA256

    7746b2d31f7ea925b00ba355e1b5635cbb49979807aaf431a9b08647d175dfac

  • SHA512

    8c6e8cd30bc65780af8338cdba4721f0b2a9f3d1387fea26daae22466c264e1c4b6776936adbd956b1109f633dae9d799d216111a43946d107dbfd7fda75ba13

  • SSDEEP

    1536:Bd9dseIOcE93NIvYvZEyFhEEOF6N4yS+AQmZTl/5s11:xdseIOKEZEyF6EOFqTiQm5l/5s11

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      8f28888a23ae1ff336f468dacf465f70_NeikiAnalytics.exe

    • Size

      76KB

    • MD5

      8f28888a23ae1ff336f468dacf465f70

    • SHA1

      cfad98988112744610bf47bb54de383151d5cff2

    • SHA256

      7746b2d31f7ea925b00ba355e1b5635cbb49979807aaf431a9b08647d175dfac

    • SHA512

      8c6e8cd30bc65780af8338cdba4721f0b2a9f3d1387fea26daae22466c264e1c4b6776936adbd956b1109f633dae9d799d216111a43946d107dbfd7fda75ba13

    • SSDEEP

      1536:Bd9dseIOcE93NIvYvZEyFhEEOF6N4yS+AQmZTl/5s11:xdseIOKEZEyF6EOFqTiQm5l/5s11

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks