General

  • Target

    12fd4dbf9ee637786d4400e3b6da5c60_NeikiAnalytics.exe

  • Size

    76KB

  • Sample

    240610-peg81sae2w

  • MD5

    12fd4dbf9ee637786d4400e3b6da5c60

  • SHA1

    c25beffb9990ae0108413599d5d884aee813fd10

  • SHA256

    f0e4b3e4934f84c0142b21fac450506f6d72420d9938002084db61faf3eda6eb

  • SHA512

    d40fbb46e8b43f17304b0089fc774ba8c240aee2d3640ff6cf350587a7318a4dede84ec3c3cf5e1f97637092858c3404837a1e29b72ecbfef55500ccd0646c10

  • SSDEEP

    1536:Ld9dseIOcE93NIvYvZEyFhEEOF6N4yS+AQmZTl/5s11:7dseIOKEZEyF6EOFqTiQm5l/5s11

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      12fd4dbf9ee637786d4400e3b6da5c60_NeikiAnalytics.exe

    • Size

      76KB

    • MD5

      12fd4dbf9ee637786d4400e3b6da5c60

    • SHA1

      c25beffb9990ae0108413599d5d884aee813fd10

    • SHA256

      f0e4b3e4934f84c0142b21fac450506f6d72420d9938002084db61faf3eda6eb

    • SHA512

      d40fbb46e8b43f17304b0089fc774ba8c240aee2d3640ff6cf350587a7318a4dede84ec3c3cf5e1f97637092858c3404837a1e29b72ecbfef55500ccd0646c10

    • SSDEEP

      1536:Ld9dseIOcE93NIvYvZEyFhEEOF6N4yS+AQmZTl/5s11:7dseIOKEZEyF6EOFqTiQm5l/5s11

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks