General

  • Target

    a937b12034943b8964887060a42c5970_NeikiAnalytics.exe

  • Size

    96KB

  • Sample

    240519-j2xdkaaa2v

  • MD5

    a937b12034943b8964887060a42c5970

  • SHA1

    f74a6e9ee5450f859deeb18da8e9a81c3c89fd2f

  • SHA256

    3b3052e8309f4692c8725ae45533de8fe5b95039f73666f0db194a54e423e0bc

  • SHA512

    a6114c777c5c2b1f7d192edd184b3ea627bd98d9b326dc75edb00e42ae929918e0ed90424ed541adac90abc2f0b8bb01b63fc3e0fb1ba361763281f2da9783eb

  • SSDEEP

    1536:TnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:TGs8cd8eXlYairZYqMddH13L

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      a937b12034943b8964887060a42c5970_NeikiAnalytics.exe

    • Size

      96KB

    • MD5

      a937b12034943b8964887060a42c5970

    • SHA1

      f74a6e9ee5450f859deeb18da8e9a81c3c89fd2f

    • SHA256

      3b3052e8309f4692c8725ae45533de8fe5b95039f73666f0db194a54e423e0bc

    • SHA512

      a6114c777c5c2b1f7d192edd184b3ea627bd98d9b326dc75edb00e42ae929918e0ed90424ed541adac90abc2f0b8bb01b63fc3e0fb1ba361763281f2da9783eb

    • SSDEEP

      1536:TnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:TGs8cd8eXlYairZYqMddH13L

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks