General

  • Target

    16ea67cd322a3192fba2492d5a681b50_NeikiAnalytics.exe

  • Size

    88KB

  • Sample

    240522-ec57ysbc3y

  • MD5

    16ea67cd322a3192fba2492d5a681b50

  • SHA1

    7d537c73a336ba181b7769935c2fd336a173f563

  • SHA256

    327fdaee5209f50e7612cc936993700416eb241d3a2888d2746bd9ff86180d10

  • SHA512

    2689666764bfd91b11656953b41751ec88e88708f84af2acaba1f80841b07ffdd7de650185c0cc8ba7cc531598a8d831465a30692442b9d357638877cab1af81

  • SSDEEP

    1536:Vd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:ddseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      16ea67cd322a3192fba2492d5a681b50_NeikiAnalytics.exe

    • Size

      88KB

    • MD5

      16ea67cd322a3192fba2492d5a681b50

    • SHA1

      7d537c73a336ba181b7769935c2fd336a173f563

    • SHA256

      327fdaee5209f50e7612cc936993700416eb241d3a2888d2746bd9ff86180d10

    • SHA512

      2689666764bfd91b11656953b41751ec88e88708f84af2acaba1f80841b07ffdd7de650185c0cc8ba7cc531598a8d831465a30692442b9d357638877cab1af81

    • SSDEEP

      1536:Vd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:ddseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks