General
- Target 30b093088b719b29c01cc6c858f94690_NeikiAnalytics.exe
- Size 96KB
- Sample240612-ls824stflk
- SHA256 9ef4cb189719cf3a778b3b26f415bfb5d7348e7e81163f52eea74803e23860fc
- MD5 30b093088b719b29c01cc6c858f94690
- SHA1 454e885a530e28c4a9cc12590101688892868bfd
- SHA512 f294479b2ab84530c2d5d08150ac3b5fb440e6726a279da9ce83620d9497c752a4e8ee3332876a804d0431f60e230c28973513e69971b09b274a9dd649ea11bc
- SSDEEP 1536:qnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:qGs8cd8eXlYairZYqMddH13L
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
30b093088b719b29c01cc6c858f94690_NeikiAnalytics.exe
Resource
win7-20240508-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
neconyd
C2
-
http://ow5dirasuek.com/
-
http://mkkuei4kdsz.com/
-
http://lousta.net/
Targets
-
- Target 30b093088b719b29c01cc6c858f94690_NeikiAnalytics.exe
- Size 96KB
- SHA256 9ef4cb189719cf3a778b3b26f415bfb5d7348e7e81163f52eea74803e23860fc
- MD5 30b093088b719b29c01cc6c858f94690
- SHA1 454e885a530e28c4a9cc12590101688892868bfd
- SHA512 f294479b2ab84530c2d5d08150ac3b5fb440e6726a279da9ce83620d9497c752a4e8ee3332876a804d0431f60e230c28973513e69971b09b274a9dd649ea11bc
- SSDEEP 1536:qnAHcBbLmdvduLd8IDiaP/8A68YaiIv2RwEYqlwi+BzdAeV9b5ADbyxxL:qGs8cd8eXlYairZYqMddH13L
- MD5 SHA1 SHA512 SSDEEP
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext