Overview

overview

10

Static

static

10

70ff0a388a...cs.exe

windows7-x64

10

70ff0a388a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    70ff0a388a2f4b11613b8e14915caf80_NeikiAnalytics.exe

  • Size

    72KB

  • Sample

    240523-b7wp8ahc3w

  • MD5

    70ff0a388a2f4b11613b8e14915caf80

  • SHA1

    979b71a89232da68f34423dd3d59d87c17b2c07a

  • SHA256

    94715f5fa671f0dfa29eba6ecee76ac1eec3c36dfb87991f285b8581297ef0e2

  • SHA512

    8ad803e0b73781b63ba02d0c65e87a5e96ecffbb981b0d623d85725352059f9638a6c574e587f3e13fc4f2f48310c7cda988b05b6c0d79ccb68443196840ab42

  • SSDEEP

    1536:Id9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211:4dseIOMEZEyFjEOFqTiQm5l/5211

Score
10/10
neconydtrojan

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      70ff0a388a2f4b11613b8e14915caf80_NeikiAnalytics.exe

    • Size

      72KB

    • MD5

      70ff0a388a2f4b11613b8e14915caf80

    • SHA1

      979b71a89232da68f34423dd3d59d87c17b2c07a

    • SHA256

      94715f5fa671f0dfa29eba6ecee76ac1eec3c36dfb87991f285b8581297ef0e2

    • SHA512

      8ad803e0b73781b63ba02d0c65e87a5e96ecffbb981b0d623d85725352059f9638a6c574e587f3e13fc4f2f48310c7cda988b05b6c0d79ccb68443196840ab42

    • SSDEEP

      1536:Id9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211:4dseIOMEZEyFjEOFqTiQm5l/5211

    Score
    10/10
    neconydtrojan

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks