General

  • Target

    1889f9d2380a0b437839229a58a57910_NeikiAnalytics.exe

  • Size

    64KB

  • Sample

    240523-jh8bqahf88

  • MD5

    1889f9d2380a0b437839229a58a57910

  • SHA1

    e36286ca074f0ecc71523a7a332ea48f332a26b3

  • SHA256

    f3f0a313306e331089a062918b7e24ca0aeb07ebaf1d0895ec8df9a8654d2f75

  • SHA512

    165a935b7ddec438fad4cc749ec0e3191e51a515cf28b67b2394d9b059fd03f12fc49a817b96674772f8b5991d9a3bfadf8779201ef6eeef32d31ae505331fa9

  • SSDEEP

    768:SMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uA:SbIvYvZEyFKF6N4yS+AQmZcl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      1889f9d2380a0b437839229a58a57910_NeikiAnalytics.exe

    • Size

      64KB

    • MD5

      1889f9d2380a0b437839229a58a57910

    • SHA1

      e36286ca074f0ecc71523a7a332ea48f332a26b3

    • SHA256

      f3f0a313306e331089a062918b7e24ca0aeb07ebaf1d0895ec8df9a8654d2f75

    • SHA512

      165a935b7ddec438fad4cc749ec0e3191e51a515cf28b67b2394d9b059fd03f12fc49a817b96674772f8b5991d9a3bfadf8779201ef6eeef32d31ae505331fa9

    • SSDEEP

      768:SMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uA:SbIvYvZEyFKF6N4yS+AQmZcl/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks