General

  • Target

    5f0a446faff4802e6d2194267ac4d620_NeikiAnalytics.exe

  • Size

    72KB

  • Sample

    240607-rbjc1shc6t

  • MD5

    5f0a446faff4802e6d2194267ac4d620

  • SHA1

    575b5500406b9d6815ad5330620e766561533e40

  • SHA256

    dea039c6da920c8f20e36aba413a3e50bc02ebb8e275c10d7388f79818a936b0

  • SHA512

    8040e1782208ff46e7cc55919eb98ab117379bba82da0a3cde0a8f8e93be93b8ad73cd408893e7420be2f64cb560554597a4ccb4c3ee13186f176d4238f29125

  • SSDEEP

    1536:Nd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211:ldseIOMEZEyFjEOFqTiQm5l/5211

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      5f0a446faff4802e6d2194267ac4d620_NeikiAnalytics.exe

    • Size

      72KB

    • MD5

      5f0a446faff4802e6d2194267ac4d620

    • SHA1

      575b5500406b9d6815ad5330620e766561533e40

    • SHA256

      dea039c6da920c8f20e36aba413a3e50bc02ebb8e275c10d7388f79818a936b0

    • SHA512

      8040e1782208ff46e7cc55919eb98ab117379bba82da0a3cde0a8f8e93be93b8ad73cd408893e7420be2f64cb560554597a4ccb4c3ee13186f176d4238f29125

    • SSDEEP

      1536:Nd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211:ldseIOMEZEyFjEOFqTiQm5l/5211

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks