General

  • Target

    158bfdd88905d9d4efa5aea8888dcdb0_NeikiAnalytics.exe

  • Size

    92KB

  • Sample

    240612-b3yzsayajh

  • MD5

    158bfdd88905d9d4efa5aea8888dcdb0

  • SHA1

    2798824ecadea3a6248c777597a78c98ea3cd870

  • SHA256

    0c28664b1811fdc772381a52256a198ee86fd4d0d38683098aac7600b14ceb26

  • SHA512

    13748e759afd05cc6ea173c51fc42f6bd8efb96bc6d8e8329ed14c320949a5e8c46307a9261808aebb30e18255b20bae749c64706bc352eeccf2e12b6149ab09

  • SSDEEP

    1536:4d9dseIOcEE3bIvYvZEyF4EEOF6N4yS+AQmZTl/5:IdseIO/EZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      158bfdd88905d9d4efa5aea8888dcdb0_NeikiAnalytics.exe

    • Size

      92KB

    • MD5

      158bfdd88905d9d4efa5aea8888dcdb0

    • SHA1

      2798824ecadea3a6248c777597a78c98ea3cd870

    • SHA256

      0c28664b1811fdc772381a52256a198ee86fd4d0d38683098aac7600b14ceb26

    • SHA512

      13748e759afd05cc6ea173c51fc42f6bd8efb96bc6d8e8329ed14c320949a5e8c46307a9261808aebb30e18255b20bae749c64706bc352eeccf2e12b6149ab09

    • SSDEEP

      1536:4d9dseIOcEE3bIvYvZEyF4EEOF6N4yS+AQmZTl/5:IdseIO/EZEyFjEOFqTiQm5l/5

    Score
    10/10
    • Neconyd

      Neconyd is a trojan written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks