General

  • Target

    1b8c29c6b577ac6859a05a89c7c948b0_NeikiAnalytics.exe

  • Size

    84KB

  • Sample

    240522-y31vpsfc36

  • MD5

    1b8c29c6b577ac6859a05a89c7c948b0

  • SHA1

    247b5f73204487126ee1ca3014503fad051a0dee

  • SHA256

    2c7f34d4ce9ac0f9d04fd7bca50d05e15ed62afcd446fba2f4e0cbd9441fb529

  • SHA512

    a39f3973bd2bf4905725e1a0b88e6fb8dfdcc94e731d10e03301277e7a7f2120cb1eaac1238626ad2fc073a740c27cf333d984c0b3a9fe25a3e4afbdad27daad

  • SSDEEP

    1536:Dd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:jdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      1b8c29c6b577ac6859a05a89c7c948b0_NeikiAnalytics.exe

    • Size

      84KB

    • MD5

      1b8c29c6b577ac6859a05a89c7c948b0

    • SHA1

      247b5f73204487126ee1ca3014503fad051a0dee

    • SHA256

      2c7f34d4ce9ac0f9d04fd7bca50d05e15ed62afcd446fba2f4e0cbd9441fb529

    • SHA512

      a39f3973bd2bf4905725e1a0b88e6fb8dfdcc94e731d10e03301277e7a7f2120cb1eaac1238626ad2fc073a740c27cf333d984c0b3a9fe25a3e4afbdad27daad

    • SSDEEP

      1536:Dd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:jdseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks