General

  • Target

    63b80b78b63f5395cec182e54926d640_NeikiAnalytics.exe

  • Size

    88KB

  • Sample

    240523-azgewsfb92

  • MD5

    63b80b78b63f5395cec182e54926d640

  • SHA1

    cb2a5edfdc7172d4080a5d63055c5c28a80cfd09

  • SHA256

    e68c40371975dd0c13314b7e51ae4a64738a5f77c4ddf9709194cb94b4b6ed85

  • SHA512

    b3d0a9ac632499c3493f0049ec128a29ac7b5f6eb65387a74e6db394e499873ca38c4e9e6f8dbb401d088c06b83025437f44eb6a3f3972f2d8fe277d8f3399bd

  • SSDEEP

    1536:zd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:zdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      63b80b78b63f5395cec182e54926d640_NeikiAnalytics.exe

    • Size

      88KB

    • MD5

      63b80b78b63f5395cec182e54926d640

    • SHA1

      cb2a5edfdc7172d4080a5d63055c5c28a80cfd09

    • SHA256

      e68c40371975dd0c13314b7e51ae4a64738a5f77c4ddf9709194cb94b4b6ed85

    • SHA512

      b3d0a9ac632499c3493f0049ec128a29ac7b5f6eb65387a74e6db394e499873ca38c4e9e6f8dbb401d088c06b83025437f44eb6a3f3972f2d8fe277d8f3399bd

    • SSDEEP

      1536:zd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:zdseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks