General

  • Target

    2cc02514a38495243bf39b0d13ea2450_NeikiAnalytics.exe

  • Size

    88KB

  • Sample

    240607-bz8ptage34

  • MD5

    2cc02514a38495243bf39b0d13ea2450

  • SHA1

    db176a85eb47f81549f5858e0ae9b6a7c6aa9a18

  • SHA256

    42392e6938f5f1f6819c0aab15f4edf6d3c2c68fc96c64dff056f1d8d78d9753

  • SHA512

    eb0851fa9ccc41ebe5035440d00b1cd428dd5d40b451360c9d5471982eca264ea3aaecfce4048762ff656bacfe8a07aaaa19c94dd14e384180b24aa4f662029e

  • SSDEEP

    1536:Pd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:ndseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      2cc02514a38495243bf39b0d13ea2450_NeikiAnalytics.exe

    • Size

      88KB

    • MD5

      2cc02514a38495243bf39b0d13ea2450

    • SHA1

      db176a85eb47f81549f5858e0ae9b6a7c6aa9a18

    • SHA256

      42392e6938f5f1f6819c0aab15f4edf6d3c2c68fc96c64dff056f1d8d78d9753

    • SHA512

      eb0851fa9ccc41ebe5035440d00b1cd428dd5d40b451360c9d5471982eca264ea3aaecfce4048762ff656bacfe8a07aaaa19c94dd14e384180b24aa4f662029e

    • SSDEEP

      1536:Pd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:ndseIOMEZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks