General

  • Target

    59cd4a7353fe28d1e68e3e6a7f23a5f0_NeikiAnalytics.exe

  • Size

    76KB

  • Sample

    240529-25a9lsdd3z

  • MD5

    59cd4a7353fe28d1e68e3e6a7f23a5f0

  • SHA1

    0084d644c8f8f0e117b8861520dbed60ad27e6cc

  • SHA256

    6591c343a1b5912089950087d6c926cae3f7ee46d521170311eab844fe59e2ec

  • SHA512

    4ebf2d809c20203c71163587c52bda1619cbe5a76057d202b9b5bab21c65645c26fe0787104b4c1cf649e690d33087c0169e108d9bc3960ce7040776606a21dc

  • SSDEEP

    1536:Ud9dseIOcE93dIvYvZEyF4EEOF6N4yS+AQmZTl/5R11:sdseIOKEZEyFjEOFqTiQm5l/5R11

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      59cd4a7353fe28d1e68e3e6a7f23a5f0_NeikiAnalytics.exe

    • Size

      76KB

    • MD5

      59cd4a7353fe28d1e68e3e6a7f23a5f0

    • SHA1

      0084d644c8f8f0e117b8861520dbed60ad27e6cc

    • SHA256

      6591c343a1b5912089950087d6c926cae3f7ee46d521170311eab844fe59e2ec

    • SHA512

      4ebf2d809c20203c71163587c52bda1619cbe5a76057d202b9b5bab21c65645c26fe0787104b4c1cf649e690d33087c0169e108d9bc3960ce7040776606a21dc

    • SSDEEP

      1536:Ud9dseIOcE93dIvYvZEyF4EEOF6N4yS+AQmZTl/5R11:sdseIOKEZEyFjEOFqTiQm5l/5R11

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks