General

  • Target

    175042bbe00a4a4a19ff0a5350a75220_NeikiAnalytics.exe

  • Size

    35KB

  • Sample

    240609-j72kgaga7w

  • MD5

    175042bbe00a4a4a19ff0a5350a75220

  • SHA1

    3417d6ca602ed86e42277504cc9ee324559d8a15

  • SHA256

    d3892ab51867b39296f5e3dbf80326ac26af2f694951bbc359142989e1e00968

  • SHA512

    5f5902d697c3cb563b9c512fececb2897742846aea52fb2a004acec49e8b6845c38a795270ae70c8f80e8dea90bbed8b6f32619eb18b5ca812ce94bec6d3ff9c

  • SSDEEP

    768:C6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:x8Z0kA7FHlO2OwOTUtKjpB

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      175042bbe00a4a4a19ff0a5350a75220_NeikiAnalytics.exe

    • Size

      35KB

    • MD5

      175042bbe00a4a4a19ff0a5350a75220

    • SHA1

      3417d6ca602ed86e42277504cc9ee324559d8a15

    • SHA256

      d3892ab51867b39296f5e3dbf80326ac26af2f694951bbc359142989e1e00968

    • SHA512

      5f5902d697c3cb563b9c512fececb2897742846aea52fb2a004acec49e8b6845c38a795270ae70c8f80e8dea90bbed8b6f32619eb18b5ca812ce94bec6d3ff9c

    • SSDEEP

      768:C6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:x8Z0kA7FHlO2OwOTUtKjpB

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks