General

  • Target

    4cc059f48cb3fec4846325141cbce38eeff71f0bf07e3cba164dbe65bb79b511_NeikiAnalytics

  • Size

    96KB

  • Sample

    240521-pvzg8seb4w

  • MD5

    69df56ab6b074dcfebd74dbf71a8fc20

  • SHA1

    5a7c025779be7b9ae68ef33cfe75d96c5af12774

  • SHA256

    4cc059f48cb3fec4846325141cbce38eeff71f0bf07e3cba164dbe65bb79b511

  • SHA512

    ef6622ed613d0c68f0cd7153c94173d5bfa1b796ed1cb86a8d371ba9facfc6ebe07a668c52f454f97e5cdceca208468fb9e2d598d516e1ac86ce3086ed005fa9

  • SSDEEP

    1536:ynAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:yGs8cd8eXlYairZYqMddH13L

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      4cc059f48cb3fec4846325141cbce38eeff71f0bf07e3cba164dbe65bb79b511_NeikiAnalytics

    • Size

      96KB

    • MD5

      69df56ab6b074dcfebd74dbf71a8fc20

    • SHA1

      5a7c025779be7b9ae68ef33cfe75d96c5af12774

    • SHA256

      4cc059f48cb3fec4846325141cbce38eeff71f0bf07e3cba164dbe65bb79b511

    • SHA512

      ef6622ed613d0c68f0cd7153c94173d5bfa1b796ed1cb86a8d371ba9facfc6ebe07a668c52f454f97e5cdceca208468fb9e2d598d516e1ac86ce3086ed005fa9

    • SSDEEP

      1536:ynAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:yGs8cd8eXlYairZYqMddH13L

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks