General

  • Target

    5554d94414137efb9aa3439b28873820_NeikiAnalytics.exe

  • Size

    92KB

  • Sample

    240605-p5mw7agg33

  • MD5

    5554d94414137efb9aa3439b28873820

  • SHA1

    b4763594ab72008a883c8f926dba0e70b57d87cf

  • SHA256

    b1411146ef2db38b8e22aaa9d593826912c9f7bb39169380fc58bb4a79ed3dea

  • SHA512

    52d28bf2b0d007e9bda96d2a29cb6e2609176176a58f95b8385e2aa937c1ef52f30320fd6af6c9298a8bd935d928f3f36cafdae60d71d802f91d969d316c2875

  • SSDEEP

    768:hMEIvFGvZEh8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:hbIvYvZEgFKF6N4yS+AQmZTl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      5554d94414137efb9aa3439b28873820_NeikiAnalytics.exe

    • Size

      92KB

    • MD5

      5554d94414137efb9aa3439b28873820

    • SHA1

      b4763594ab72008a883c8f926dba0e70b57d87cf

    • SHA256

      b1411146ef2db38b8e22aaa9d593826912c9f7bb39169380fc58bb4a79ed3dea

    • SHA512

      52d28bf2b0d007e9bda96d2a29cb6e2609176176a58f95b8385e2aa937c1ef52f30320fd6af6c9298a8bd935d928f3f36cafdae60d71d802f91d969d316c2875

    • SSDEEP

      768:hMEIvFGvZEh8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:hbIvYvZEgFKF6N4yS+AQmZTl/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks