General
- Target 16729e9afdf918aa60f158b907ea3a80_NeikiAnalytics.exe
- Size 96KB
- Sample240604-3dbazaeh6v
- SHA256 e96bd4cba8ee9c9e27a2459ce8e4d79a577809fba582b14a4e56e6074edeba95
- MD5 16729e9afdf918aa60f158b907ea3a80
- SHA1 dd14ed0e145563d3d32ed1d75224086fd21ca32d
- SHA512 2acdda7415d170f8de75e67d9e4178fdecd8d3894e8714ff4cb049b6e4a5bf0dcdd2084d6e5ce80f6dff5a72e500399ca5af0a179c5029447017351504607134
- SSDEEP 1536:AnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:AGs8cd8eXlYairZYqMddH13L
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
16729e9afdf918aa60f158b907ea3a80_NeikiAnalytics.exe
Resource
win7-20240221-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
neconyd
C2
-
http://ow5dirasuek.com/
-
http://mkkuei4kdsz.com/
-
http://lousta.net/
Targets
-
- Target 16729e9afdf918aa60f158b907ea3a80_NeikiAnalytics.exe
- Size 96KB
- SHA256 e96bd4cba8ee9c9e27a2459ce8e4d79a577809fba582b14a4e56e6074edeba95
- MD5 16729e9afdf918aa60f158b907ea3a80
- SHA1 dd14ed0e145563d3d32ed1d75224086fd21ca32d
- SHA512 2acdda7415d170f8de75e67d9e4178fdecd8d3894e8714ff4cb049b6e4a5bf0dcdd2084d6e5ce80f6dff5a72e500399ca5af0a179c5029447017351504607134
- SSDEEP 1536:AnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:AGs8cd8eXlYairZYqMddH13L
- MD5 SHA1 SHA512 SSDEEP
Executes dropped EXE
Loads dropped DLL
Drops file in System32 directory
Suspicious use of SetThreadContext