General
- Target a937b12034943b8964887060a42c5970_NeikiAnalytics.exe
- Size 96KB
- Sample240519-j2xdkaaa2v
- SHA256 3b3052e8309f4692c8725ae45533de8fe5b95039f73666f0db194a54e423e0bc
- MD5 a937b12034943b8964887060a42c5970
- SHA1 f74a6e9ee5450f859deeb18da8e9a81c3c89fd2f
- SHA512 a6114c777c5c2b1f7d192edd184b3ea627bd98d9b326dc75edb00e42ae929918e0ed90424ed541adac90abc2f0b8bb01b63fc3e0fb1ba361763281f2da9783eb
- SSDEEP 1536:TnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:TGs8cd8eXlYairZYqMddH13L
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a937b12034943b8964887060a42c5970_NeikiAnalytics.exe
Resource
win7-20240419-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
neconyd
C2
-
http://ow5dirasuek.com/
-
http://mkkuei4kdsz.com/
-
http://lousta.net/
Targets
-
- Target a937b12034943b8964887060a42c5970_NeikiAnalytics.exe
- Size 96KB
- SHA256 3b3052e8309f4692c8725ae45533de8fe5b95039f73666f0db194a54e423e0bc
- MD5 a937b12034943b8964887060a42c5970
- SHA1 f74a6e9ee5450f859deeb18da8e9a81c3c89fd2f
- SHA512 a6114c777c5c2b1f7d192edd184b3ea627bd98d9b326dc75edb00e42ae929918e0ed90424ed541adac90abc2f0b8bb01b63fc3e0fb1ba361763281f2da9783eb
- SSDEEP 1536:TnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:TGs8cd8eXlYairZYqMddH13L
- MD5 SHA1 SHA512 SSDEEP
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext