General

  • Target

    50eabd69d43de62a2928c4031c3175c4a34aa4c47811efea5ff7425e149e93b0_NeikiAnalytics

  • Size

    73KB

  • Sample

    240521-qafp3aeg57

  • MD5

    372368f243b6e6b68d93ece33065a7c0

  • SHA1

    1db74e410b302830739be85335b4d585759a4348

  • SHA256

    50eabd69d43de62a2928c4031c3175c4a34aa4c47811efea5ff7425e149e93b0

  • SHA512

    06dd900cf1c7a430b6247cbc72bcfd878f54360722d4cb6485bc9795c84fb570ecbdde82e24155b63479a55858edfeaead224e5fdbc4acd02e0ab52c1e759647

  • SSDEEP

    1536:zd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:zdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      50eabd69d43de62a2928c4031c3175c4a34aa4c47811efea5ff7425e149e93b0_NeikiAnalytics

    • Size

      73KB

    • MD5

      372368f243b6e6b68d93ece33065a7c0

    • SHA1

      1db74e410b302830739be85335b4d585759a4348

    • SHA256

      50eabd69d43de62a2928c4031c3175c4a34aa4c47811efea5ff7425e149e93b0

    • SHA512

      06dd900cf1c7a430b6247cbc72bcfd878f54360722d4cb6485bc9795c84fb570ecbdde82e24155b63479a55858edfeaead224e5fdbc4acd02e0ab52c1e759647

    • SSDEEP

      1536:zd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:zdseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks